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Abstract 

We study the multi-receiver wiretap channel with public and confidential messages. 
In this channel, there is a transmitter that wishes to communicate with two legitimate 
users in the presence of an external eavesdropper. The transmitter sends a pair of 
public and confidential messages to each legitimate user. While there are no secrecy 
constraints on the public messages, confidential messages need to be transmitted in 
perfect secrecy. We study the discrete memoryless multi-receiver wiretap channel as 
well as its Gaussian multi-input multi-output (MIMO) instance. First, we consider the 
degraded discrete memoryless channel, and obtain an inner bound for the capacity re- 
gion by using an achievable scheme that uses superposition coding and binning. Next, 
we obtain an outer bound, and show that this outer bound partially matches the inner 
bound, providing a partial characterization for the capacity region of the degraded 
channel model. Second, we obtain an inner bound for the general, not necessarily 
degraded, discrete memoryless channel by using Marton's inner bound, superposition 
coding, rate-splitting and binning. Third, we consider the degraded Gaussian MIMO 
channel, and show that, to evaluate both the inner and outer bounds, considering 
only jointly Gaussian auxiliary random variables and channel input is sufficient. Since 
the inner and outer bounds partially match, these sufficiency results provide a partial 
characterization of the capacity region of the degraded Gaussian MIMO channel. Fi- 
nally, we provide an inner bound for the capacity region of the general, not necessarily 
degraded, Gaussian MIMO multi-receiver wiretap channel. 



*This work was supported by NSF Grants CCF 07-29127, CNS 09-64632, CCF 09-64645 and CCF 10- 
18185, and presented in part at the Allerton Conference on Communications, Control and Computing, 
Monticello, IL, September 2010. 
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1 Introduction 



Information theoretic secrecy is initiated by Wyner in [T], where he introduces the wiretap 
channel and obtains the capacity-equivocation region of a special class of wiretap channels. 
Wyner considers the degraded wiretap channel, where the eavesdropper's observation is a 
degraded version of the legitimate user's observation. His result is generalized to arbitrary, 
not necessarily degraded, wiretap channels in [2]. Recently, the wiretap channel gathered a 
renewed interest, and many multi-user extensions of the wiretap channel have been consid- 
ered. One particular multi-user extension of the wiretap channel, that is relevant to our work 
here, is the multi-receiver wiretap channel considered in [3H3]. A recent survey on the secure 
broadcasting problem (including the multi-receiver wiretap channel) can be found in [6]. 

In the multi-receiver wiretap channel (see Figure [T|) different from the basic wiretap 
channel in [Tp] , there are multiple legitimate users to which the transmitter sends confidential 
messages in the presence of an external eavesdropper. These multiple confidential messages 
need to be kept secret from the eavesdropper. References [3H5] consider the degraded multi- 
receiver wiretap channel (see Figure [2]), where the observations of the legitimate users and 
the eavesdropper are arranged according to a degradedness order. References [3H5] study the 
scenario where the transmitter sends a confidential message to each legitimate user where 
these confidential messages need to be kept perfectly secret from the eavesdropper. The 
capacity region of the degraded multi-receiver wiretap channel for this scenario is obtained 
in [3] for two legitimate users, and in (HE] for an arbitrary number of legitimate users. 

We note that to ensure the confidentiality of the messages in a multi-receiver wiretap 
channel, each confidential message needs to be randomized by many dummy messages (HE] • 
These dummy messages protect the confidential messages from the eavesdropper, and are 
decoded by the legitimate users in addition to the confidential messages they receive. Hence, 
indeed, the actual transmission rates are greater than the confidential message rates. This 
also implies that the use of dummy messages can be viewed as a waste of resources since some 
of the achievable rate is spent on transmitting them. To overcome this waste of resources, 
these dummy messages can be replaced with some public messages on which there are no 
secrecy constraints, as we do in this paper. 

In this paper, both to overcome this waste of resources and also to understand the actual 
possible transmission rates in a multi-receiver wiretap channel, we consider the scenario 
where the transmitter sends a pair of public and confidential messages to each legitimate 
user. While there are no secrecy concerns on the public messages, confidential messages need 
to be transmitted in perfect secrecy. We call the channel model arising from this scenario 
the multi-receiver wiretap channel with public and confidential messages. 

The capacity region of the multi-receiver wiretap channel with public and confidential 
messages is closely related to the capacity-equivocation region of the multi-receiver wiretap 
channel. In the multi-receiver wiretap channel studied in [3H5] (see also [7] for its Gaussian 
MIMO instance) each legitimate user receives only a single message which needs to be kept 
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Figure 1: Multi-receiver wiretap channel. 



perfectly secret from the eavesdropper. That is, [3HS1E] consider perfect secrecy for the mes- 
sages. As in the single-user wiretap channel [TJI2], one can be interested in the rates and 
equivocations of both messages simultaneously, i.e., in the simultaneously achievable quadru- 
ples (Ri, i?i e , R 2 , R2e)- This would be a four dimensional region, as in the model discussed 
in this paper, where we have the rates R p i, R s i, R p2 , R S 2 for the rates of the confidential and 
public messages of the two users. Unfortunately, unlike the single-user wiretap channel [Tj[2], 
where (R p , R s ) and (R, R e ) have a one-to-one relationship [HHT2], we do not have a one-to-one 
relationship between (Rpi, R s i, R P 2i Rsz) and R\ e , R2, Rie)- In this paper, we focus on 
the public and confidential messages framework, and focus on the region (Rpi, R s i, R P 2, R S 2)- 
Please see Section 12.11 for a more detailed treatment of the relationship between this region 
and the capacity-equivocation region of the multi-receiver wiretap channel that consists of 
the quadruples Ri e , R 2 , R2e)- 

In this paper, we first consider the degraded discrete memoryless multi-receiver wiretap 
channel. We propose an inner bound for the capacity region of the discrete memoryless 
channel. This inner bound is based on an achievable scheme that combines superposition 
coding [13] and binning. Binning has been used previously for the single-receiver and multi- 
receiver wiretap channels in [IH5] to associate each confidential message with many code- 
words, and hence to provide randomness for the confidential message to protect it from the 
eavesdropper. In other words, by means of binning, the confidential message is embedded 
into a doubly indexed codeword where one index denotes the confidential message and the 
other index (dummy index) denotes the necessary randomness to ensure the confidentiality 
of the message. This second index (dummy index) does not carry any information content. 

Since in our channel model there are public messages, on which there are no secrecy 
constraints, the protection of the confidential messages from the eavesdropper can be accom- 
plished by using these public messages instead of the dummy messages. Thus, the difference 
of binning used here from the binning used in [3H5] is that, here, the confusion messages carry 
information, although there are no security guarantees on this information. Consequently, 
the injection of public messages into the multi-receiver wiretap channel can be viewed as 
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Figure 2: Degraded multi- receiver wiretap channel. 



an effort to use the wasted transmission rate due to no-information bearing dummy indices, 
since these dummy indices are now replaced with information-bearing public messages on 
which there are no secrecy guarantees. 

Next, we propose an outer bound for the capacity region of the degraded discrete mem- 
oryless channel. We obtain this outer bound by combining the converse proof techniques 
for the broadcast channel with degraded message sets [H] and the broadcast channel with 
confidential messages (2]. This outer bound partially matches the inner bound we propose, 
and therefore, it provides a partial characterization of the capacity region of the degraded 
discrete memoryless channel. In particular, when we specialize these inner and outer bounds 
by setting either the public message rate of the second legitimate user or the confidential 
message rate of the first legitimate user to zero, they match and provide the exact capacity 
region for these two scenarios. Moreover, when we set the rates of both of the public mes- 
sages to zero, these inner and outer bounds match, and yield the secrecy capacity region of 
the degraded discrete memoryless channel. 

Second, we consider the general, not necessarily degraded, discrete memoryless multi- 
receiver wiretap channel. We propose an inner bound for the capacity region of the general 
channel by using Marton's inner bound [15] , superposition coding, rate-splitting and binning. 
This inner bound generalizes the inner bound we proposed for the degraded case by using 
Marton's coding. 

Third, we consider the degraded Gaussian multi-input multi-output (MIMO) instance 
of this channel model. This generalizes our work in [7], where we consider the general, 
not necessarily degraded, Gaussian MIMO channel only with confidential messages. For 
the degraded Gaussian MIMO channel in this paper, we first show that it is sufficient to 
consider jointly Gaussian auxiliary random variables and channel input for the evaluation of 
the inner bound we proposed for the degraded discrete memoryless channel. In other words, 
we prove that there is no other possible selection of auxiliary random variables and channel 
input which can provide a rate vector outside the Gaussian rate region that is obtained 
by using jointly Gaussian auxiliary random variables and channel input. We prove the 
sufficiency of Gaussian auxiliary random variables and channel input by using the de Bruijn 
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identity [HUH?], a differential relationship between the differential entropy and the Fisher 
information matrix, in conjunction with the properties of the Fisher information matrix. 

Next, we consider the outer bound we proposed for the degraded discrete memoryless 
channel. We show that, similar to the inner bound, considering only jointly Gaussian aux- 
iliary random variables and channel input is sufficient to evaluate this outer bound for the 
degraded Gaussian MIMO channel. Indeed, this sufficiency result is already implied by the 
sufficiency of jointly Gaussian auxiliary random variables and channel input for the inner 
bound, because of the partial match between the inner and the outer bounds. Moreover, this 
partial match also gives us a partial characterization of the capacity region of the degraded 
Gaussian MIMO channel. The inner and outer bounds for the degraded Gaussian MIMO 
channel completely match giving us the exact capacity region, when either the public mes- 
sage rate of the second legitimate user or the confidential message rate of the first legitimate 
user is zero. Moreover, these inner and outer bounds match for the secrecy capacity region 
of the degraded Gaussian MIMO channel, which we obtain when we the rates of both of the 
public messages are zero [HUE]. 

Finally, we consider the general, not necessarily degraded, Gaussian MIMO multi-receiver 
wiretap channel. We propose an inner bound for the capacity region of the general Gaussian 
MIMO channel. We obtain this inner bound by using the achievable scheme we proposed for 
the general discrete memoryless channel. In particular, we evaluate this achievable scheme 
by using dirty-paper coding [19] to obtain an inner bound for the capacity region of the 
general Gaussian MIMO channel. 

2 Discrete Memoryless Multi- Receiver Wiretap Chan- 
nels 

In this section, we study discrete memoryless multi-receiver wiretap channels which consist 
of a transmitter with input alphabet X, two legitimate users with output alphabets 3^1,3^2, 
and an eavesdropper with output alphabet Z. The channel is memoryless with a transition 
probability p(y 1 ,y 2 , z\x), where X G X is the channel input, and Y\ G 3^1,^2 £ 3^2, % G Z 
denote the channel outputs of the first legitimate user, the second legitimate user, and the 
eavesdropper, respectively. 

We consider the scenario in which, the transmitter sends a pair of public and confidential 
messages to each legitimate user. While there are no secrecy constraints on the public 
messages, the confidential messages need to be transmitted in perfect secrecy. We call the 
channel model arising from this scenario the multi-receiver wiretap channel with public and 
confidential messages. 

An (n, 2 nRpl , 2 nRal , 2 nRp2 , 2 nRa2 ) code for this channel consists of four message sets, W p i = 
{l,...,2 nR pi}, W sl = {l,...,2 nR ^}, W p2 = {1,...,2^ 2 }, W s2 = {l,...,2 nR ^}, one en- 
coder at the transmitter / : W p \ x W s i x W P 2 x W S 2 — » X n , and one decoder at each 
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legitimate user gj : y" — » W P j x W S j, for j = 1,2. The probability of error is de- 
fined as P e n = max{P e ^,P e n 2 }, where = Pr^YJ 1 ) ^ (W pj ,W sj )}, for j = 1,2, and 
Wpi,W s i,Wp2,W S 2 are uniformly distributed random variables in W p i, W s i, W P 2, W S 2, re- 
spectively. A rate tuple (R p i, R s i, R p2 , R s2 ) is said to be achievable if there exists an 
(n, 2"^, 2 ni?sl , 2 n ^ 2 , 2 ni?s2 ) code which satisfies lim^^ P™ = and 

lim -I(W sl ,W s2 ;Z n ) = (1) 

We note that the perfect secrecy requirement given by ([I]) implies the following individual 
perfect secrecy requirements 

lim -I(W al ; Z n ) = and lim -I(W s2 ] Z n ) = (2) 

n— >oo n n— voo fl 

The capacity region of the multi-receiver wiretap channel with public and confidential 
messages is defined as the convex closure of all achievable rate tuples (R p i, P s i, R p2 , R s2 ), 
and is denoted by C. 

In Section I2.2[ we study degraded multi-receiver wiretap channels which satisfy the fol- 
lowing Markov chain 

X -> Y x ->■ Y 2 ->■ Z (3) 



2.1 Capacity-Equivocation Region of the Multi-Receiver Wiretap 
Channel 

In this section, we consider the capacity-equivocation region of the multi-receiver wiretap 
channel and discuss its connection to the capacity region of the multi-receiver wiretap channel 
with public and confidential messages. To this end, we consider both rates and equivocations 
of the messages in the multi-receiver wiretap channel. Each legitimate user receives a single 
message which needs to be kept hidden as much as possible from the eavesdropper. In par- 
ticular, each message has its own rate and a corresponding equivocation. The equivocations 
are quantified by the following conditional entropies: 

-HiWAZ™) and -H(W 2 \Z n ) and -H(W u W 2 \Z n ) (4) 

n n n 

An (n, 2 nRl , 2 nRel , 2 nR2 , 2 nRe2 ) code for this channel consists of two message sets, Wi = 
{1, . . . ,2 nRl }, W 2 = {1, . . . ,2 nR2 }, one encoder at the transmitter / : Wi x W 2 X n , 
and one decoder at each legitimate user gj : y™ — > Wj, for j = 1,2. The probability of 
error is defined as P e n = maxjP^, P™ 2 }> where P£j = Pr[^-(1^") ^ Wj], for j = 1,2, and 
Wi,W 2 are uniformly distributed random variables in Wi,W 2 , respectively. A rate tuple 
(R 1: R ei , R 2 , R&) is said to be achievable if there exists an (n, 2 nR \ 2 nR£l , 2 nR2 , 2 nR ^) code 
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which satisfies lim^oc P™ = and 

R el < lim -H(Wi\Z n ) (5) 

n— >oo n 

R e2 < lim -H{W 2 \Z n ) (6) 
Rei + Re2 < lim —H(W 1 , W 2 \Z n ) (7) 

n->oo n 

The capacity-equivocation region of the multi-receiver wiretap channel is defined as the 
convex closure of all achievable rate tuples (Ri, R e \, R 2 , R e 2), and is denoted by C e . 

We now have some remarks about the definition of the equivocations by ©-(E]). First, 
if we consider the perfect secrecy rates, i.e., R e \ = R\,R e2 = R 2 , then the last constraint 
in ([7]) is sufficient, since this last constraint implies the individual constraints in (jSD"©- 
Our second remark is about the sum equivocation constraint in ([7]). If we consider the 
single-legitimate user case as in [IJ|2], we have only one of the two constraints in (J5|)- ([6j) as 
equivocation. A direct generalization of this definition to the multiple legitimate user case 
already yields the individual constraints in (J6j) , however here we put one more constraint 
by (J7J). The reason behind this additional sum equivocation constraint in ((7j) is as follows. 
The individual constraints in ([5])- ([6]) consider the possibility that the eavesdropper can try 
to decode W\ and W 2 separately, however, these two individual constraints in ([5])-d6]) do not 
consider the possibility that the eavesdropper might try to decode W\,W 2 jointly. Thus, 
to reflect the possibility that the eavesdropper might try to decode Wi,W 2 jointly on the 
equivocations, we include the sum equivocation constraint in ([TJ). 

Next, we discuss the connection between the capacity region of the multi-receiver wiretap 
channel with public and confidential messages and the capacity-equivocation region of the 
multi-receiver wiretap channel. For the single-legitimate user case, there is a one-to-one 
correspondence between these two regions as stated in the following lemma [8HT2]. 

Lemma 1 (R pl , R sl , 0,0) G C iff {R t = R pl + R sl , R el = R al , 0, 0) G C e . 

The "if" part of this lemma follows from the definitions of the two regions. However, the 
"only if" part of this lemma uses the properties of the capacity achieving coding scheme for 
the region cjj. Since as of now we do not know the capacity-achieving scheme for C e , we 
can provide only a partial generalization of Lemma CD to the multiple legitimate user case as 
stated in the following lemma. 

Lemma 2 // (R pl , R s i, R p2 , R s2 ) G C, we have (Ri = R p i + R s i,R e i = R s i,R 2 = R p2 + 

Rs2, Rel — Rs2) G C e . 

Lemma [2] can be proved by using the definitions of C and C e . This lemma states that all 
inner bounds we obtain for C also serve as inner bounds for C e . Indeed, the outer bounds we 

1 Cg denotes the capacity-equivocation region for the single legitimate user case. 



7 



obtain for C and the capacity results we obtain for the sub-regions of C (a sub-region of C is 
a region that can be obtained from C by setting one or more of the four rates involved in C 
to zero) can be shown to be valid for C e . 



2.2 Degraded Channels 

In this section, we consider the degraded multi-receiver wiretap channel. We first present an 
inner bound for C in the following theorem. 

Theorem 1 An achievable rate region for the multi-receiver wiretap channel with public and 
confidential messages is given by the union of rate tuples (Rpi, R s i, Rp 2 , R S 2) satisfying 

Rs2<I(U;Y 2 )-I(U;Z) (8) 

Rsi + Rs2 < I(U; Y 2 ) + I(X; Y 1 \U) - I(X; Z) (9) 

R P 2 + Rs2<I(U;Y 2 ) (10) 

R sl + R p2 + R S 2 < I(U; Y 2 ) + I(X; Y X \U) - I(X; Z\U) (11) 

R pl + R sl + R p2 + R S 2 < I(U; Y 2 ) + I(X; Y X \U) (12) 

where (U, X) satisfy the following Markov chain 

U^X^Y l ^Y 2 ^Z (13) 

The achievable rate region given by Theorem [1] can be obtained from Theorem [3j which 
will be introduced in the next section. Here, we provide an outline of the proof of Theorem [TJ 
We prove Theorem [1] in two steps. As a first step, one can show that the rate tuples 
(R pl , R sl , Rp 2 , R s2 ) satisfying 

Rp2 < I{U; Z) (14) 
R S 2<I(U;Y 2 )-I(U;Z) (15) 
R pl <I(X;Z\U) (16) 
i? s i</(X;n|C/)-/(X;Z|C/) (17) 

are achievable, where (U, X) satisfy (|T3|) . We show the achievability of rate tuples (Rpi, R s \, 
Rp2,Rs2) satisfying (fT4l) - (fT7l) by using superposition coding. The differences of the super- 
position coding used here from the original superposition coding that attains the capacity 
region of the degraded broadcast channel [13] are that both public and confidential mes- 
sages of a legitimate user are transmitted by the same layer of the codebook, and the public 
messages provide the necessary randomness to protect the confidential messages from the 
eavesdropper. In other words, in addition to their information content, the public mes- 
sages also serve as the confusion messages that prevent the eavesdropper from decoding the 



8 



confidential messages. 

We also note that the achievability of the region given in ( IT4|) - ffT71) can be concluded by 
using the achievable scheme in [3H5], which was designed for the degraded multi- receiver wire- 
tap channel only with confidential messages. This achievable scheme also uses superposition 
coding and binning. In this scheme, to achieve the confidential message rates 

R s2 = I(U;Y 2 )-I(U;Z) (18) 
R s i = I(X;Yi\U)-I(X;Z\U) (19) 

each confidential message rate is equipped with the rate of some dummy messages, which 
provide the necessary protection for the confidential messages against the eavesdropper. 
In particular, the confidential message rates R s2 and R s \ are equipped with the following 
dummy message rates 

R s2 = I(U; Z) (20) 
R sl = I(X;Z\U) (21) 

where R S j is the dummy message rate spent for the jth legitimate user's confidential message 
rate R S j. Since in our channel model there are public messages on which there are no secrecy 
constraints, these dummy message rates can be used as public message rates yielding the 
achievable rate region given in ( IT31) -(fT7j). We note that the presence of public messages in 
our channel model prevents the waste of resources due to the transmission of the dummy 
messages at rates given by (120]) - (I2~T]) to protect the confidential messages. 
As the second step to prove Theorem (TJ one can use the following facts 

• since confidential messages can be considered as public messages as well, each legitimate 
user's confidential message rate R S j can be given up in favor of its public message rate 
Rpj, i.e., if (Rpi, R sl , R p2 , R s2 ) is achievable, (R pl + ati, R sl - ai, R p2 + a 2 , R S 2 - oi 2 ) is 
also achievable for any non-negative (ai,a 2 ) pairs satisfying otj < R S j, 

• since the channel is degraded, the second legitimate user's confidential message rate R s2 
can be given up in favor of the first legitimate user's public and confidential message 
rates R p i and R s i, i.e., if (R p i, R s i, R P 2, R S 2) is achievable, (R p i + a, R s i + j3, R p2 , R s2 — 
a — (3) is also achievable for any non-negative (a, 0) pairs satisfying a + (3 < R s2 , 

• since the channel is degraded, the second legitimate user's public message rate R p2 
can be given up in favor of the first legitimate user's public message rate Rpi, i.e., if 
(Rpi, R s i, R P 2, R S 2) is achievable, (Rpi + a, R s i, R p2 — a, R s2 ) is also achievable for any 
non- negative a satisfying a < R p2 , 

in conjunction with Fourier-Motzkin elimination, and show that the region given in (fI31) - (TPTj) 
is equivalent to the one given in (!8|)- (fT2|) . 
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The reason we state the achievable rate region by using the bounds in (|8|)-( TT2|) instead of 
the bounds in ( fH|) -( fT7|) is that the former expressions simplify the comparison of the inner 
bound with the outer bound which will be introduced in the sequel. Another reason that 
we state achievable region by using the bounds in (IBl)-( fT2l) is that they are more convenient 
for an explicit evaluation for the case of degraded Gaussian MIMO channel, which will be 
considered in Section 13.21 

Now, we introduce the following outer bound for the capacity region of the degraded 
discrete memoryless multi-receiver wiretap channel with public and confidential messages. 

Theorem 2 The capacity region of the degraded multi-receiver wiretap channel with pub- 
lic and confidential messages is contained in the union of rate tuples (R p i, R sX , R p2 , R s2 ) 
satisfying 

R s2 <I(U;Y 2 )-I(U;Z) (22) 

Rsi + Rs2 < I(U; Y 2 ) + I(X; Y X \U) - I(X; Z) (23) 

R P 2 + Rs2<I(U;Y 2 ) (24) 

R pl + R sl + R p2 + R s2 < I(U; Y 2 ) + /(X; Y X \XJ) (25) 

for some (U, X) such that U, X exhibit the following Markov chain 

U^X^Y l ^Y 2 ^Z (26) 

The proof of Theorem [2] is given in Appendix [A] This outer bound provides a partial 
converse for the capacity region of the degraded multi-receiver wiretap channel because the 
only difference between the inner bound in Theorem [I] and the outer bound in Theorem [2] is 
the bound on R sX + R p2 + R s2 given by (fTTl) . In particular, in addition to the bounds defining 
the outer bound for the capacity region, the inner bound includes the following constraint 

R sl + R p2 + R s2 < I(U; Y 2 ) + I(X; Y X \U) - I(X; Z\U) (27) 

Besides that, the inner and outer bounds are identical. 

Despite this difference, there are cases for which the exact capacity region can be obtained. 
First, we note that the inner bound in Theorem [1] and the outer bound in Theorem [2] match 
when the confidential message rate of the first legitimate user is zero, i.e., R sX = 0. 

Corollary 1 The capacity region of the degraded multi-receiver wiretap channel without the 
first legitimate user's confidential message is given by the union of rate triples (R p i, R p2 , R s2 ) 
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satisfying 



R s2 <I(U;Y 2 )-I(U; Z) 
R S 2 + R P 2 < I{U; Y 2 ) 
R pl + R p2 + R s2 < I(U; Y 2 ) + I(X; Y X \U) 



(28) 
(29) 
(30) 



where U, X exhibit the following Markov chain 



U^X^Yt^Y 2 ^Z 



(31) 



Corollary [T] can be proved by setting R s \ = in both Theorem [T] and Theorem [2] and 
eliminating the redundant bounds. 

Next, we note that the inner bound in Theorem [1] and the outer bound in Theorem [2] 
match when the public message rate of the second legitimate user is zero, i.e., R p2 = 0. 

Corollary 2 The capacity region of the degraded multi-receiver wiretap channel without the 
second legitimate user's public message is given by the union of rate triples {R p \, R s \, R s2 ) 
satisfying 



Corollary [2] can be proved by setting R p2 = in both Theorem [T] and Theorem [2] and 
eliminating the redundant bounds. 

Corollary [2] also implies that the inner bound in Theorem [T] and the outer bound in 
Theorem [2] match on the secrecy capacity region of the degraded multi-receiver wiretap 
channel. In particular, the inner bound in Theorem [1] and the outer bound in Theorem [2] 
match if the rates of both public messages are set to zero, i.e., R p i = R p2 = 0. The secrecy 
capacity region of the degraded multi-receiver wiretap channel is given by the following 
corollary. 

Corollary 3 (j3H5j) The secrecy capacity region of the degraded multi-receiver wiretap chan- 



R s2 <I(U;Y 2 )-I(U; Z) 
Rsi + R s2 < I(U; Y 2 ) + I(X; Y X \U) - I(X; Z) 
R pl + R sl + R s2 < I(U; Y 2 ) + I(X; Y X \U) 



(32) 
(33) 
(34) 



where U, X exhibit the following Markov chain 



U X -^Y X ^Y 2 ^ Z 



(35) 
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nel is given by the union of rate pairs (R s i,R S 2) satisfying^ 

R s2 <I(U;Y 2 )-I(U;Z) (36) 
Rsi + Rs2 < I(U; Y 2 ) + /(X; Y X \U) - I(X; Z) (37) 

where U, X exhibit the following Markov chain 

U^X^Y X ^Y 2 ^Z (38) 

We note that in addition to its representation in Corollary "21 the secrecy capacity region 
of the degraded multi-receiver wiretap channel can be stated in an alternative form as the 
union of rate pairs (R sX , R s2 ) satisfying 

R s2 <I(U;Y 2 )-I(U;Z) (39) 
R sX <I(X;Y x \U)-I(X;Z\U) (40) 

where U, X exhibit the Markov chain in ([3*81 . 
2.3 General Channels 

We now consider the general, not necessarily degraded, discrete memoryless multi-receiver 
wiretap channel with public and confidential messages. We propose an inner bound for the 
capacity region of the general discrete memoryless multi-receiver wiretap channel as follows. 



Theorem 3 An achievable rate region for the discrete memoryless multi-receiver wiretap 
channel with public and confidential messages is given by the union of rate tuples (Rpi, R s i, R P 2, 



R s2 ) satisfying 

R sl < min I(U; Yj\Q) + I(V X ; Y 1 \U) - I(U, Vr, Z\Q) (41) 

,7=1,2 

R s2 < min I(U; YAQ) + I(V 2 ; Y 2 \U) - I(U, V 2 ; Z\Q) (42) 
i=i,2 

Rsi + Rs2 < min I(U; YAQ) + I{V X - Y X \U) + I(V 2 ; Y 2 \U) - I{V X - V 2 \U) 
i=i,2 

-I(U,V X ,V 2 ;Z\Q) (43) 

Rsi + Rpi < min I(U; Yj) + I(V X ; Y X \U) (44) 
i=i,2 

R S 2 + R P 2 < min I(U; Yj) + I(V 2 ; Y 2 \U) (45) 

.7=1,2 

R sX + R pl + R s2 < min I(U; Yj) + I(V X ; Y X \U) + I(V 2 ; Y 2 \U) - I(V 2 ; Z\U) (46) 



2 The secrecy capacity region of the degraded multi- receiver wiretap channel for an arbitrary number of 
legitimate users can be found in [~fl[5]. 
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R sl + R pl + R s2 < min I(U; Yj) + 27(K; Y 1 \U) + I(V 2 ; Y 2 \U) - 7(K; V 2 |I7) 

3=1> 2 




i? sl + R s2 + R P 2 < min I(U; Yj) + 7(V i; Y,\U) + 7(F 2 ; y 2 |[7) - 7(V i; Z|*7) (48) 
3=1,2 

77 sl + # s2 + 77 p2 < min /(£/; ^) + 7(V l5 Y 1 \U) + 2I(V 2 ; Y 2 \U) - J(K; V^|t7) 




i2 fll + i2pi + # s2 + 77 p2 < min 7(C7; K,) + 7(V l5 Yi|£7) + 7(F 2 ; y 2 |C7) - 7(K; (50) 

3=1.2 



/or some Q,U,V 1 ,V 2 such that p(q,u,v 1 ,v 2 ,x,y 1 ,y 2 , z) = p(q,u)p(v 1 ,v 2 ,x\u)p(y 1 ,y 2 ,z\x). 

The proof of Theorem [3] is given in Appendix [Bl We note that if one sets Q = 4>,V 2 = 
U, V\ = X in Theorem [31 the achievable rate region in Theorem [3] reduces to the one provided 
in Theorem [TJ Thus, the achievable scheme in Theorem [3] can be seen as a generalization of 
the achievable scheme in Theorem [TJ where we achieve this generalization by using Marton's 
coding and rate-splitting in addition to the superposition coding and binning that were 
already used for the achievable scheme in Theorem [IJ 

Next, we provide an outline of the achievable scheme in Theorem [3] In this achievable 
scheme, we first divide each public message W P j into three parts as WppWppWpp where 
the rates of the messages W^p W^, are given by 77;L-, 77L-, 77^ -, respectively, and R P j = 
Rpj + Rpj + Rpj. Similarly, we divide each confidential message W S j into two parts as 
Wh,Wgj, where the rates of the messages W^pW^ are given by R\pR 2 s p respectively, and 
R S j = Rlj + Rgj. The first parts of the public messages, i.e., W p \ and W p \, are sent through 
the sequences generated by Q. The second parts of the public messages, i.e., Wp X and 
Wp 2 , and the first parts of the confidential messages, i.e., W} x and W} 2) are sent through the 
sequences generated by U. Both legitimate receivers decode these sequences, and hence, each 
legitimate receiver decodes the parts of the other legitimate user's public and confidential 
messages. The last parts of each public message and each confidential message, i.e., 
and Wgj, are encoded by the sequences generated through Vj. This encoding is performed 
by using Marton's coding |15J . Each legitimate receiver, after decoding Q n and U n , decodes 
the sequences VJ 1 . The details of the proof is given in Appendix [Bl 

3 Gaussian MIMO Multi-Receiver Wiretap Channels 

Here, we consider the Gaussian MIMO multi-receiver wiretap channel which is defined by 



Y 2 = X + N 2 



Y 



Z = X + N z 



i — 



X + N 



(51) 
(52) 
(53) 
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where the channel input X is subject to a covariance constraint 

E [XX T ] r< S (54) 

where S >~ and N^N^N^ are zero- mean Gaussian random vectors with covariance ma- 
trices Si, S 2 , S^, respectively. 

In Section 13.21 we consider degraded Gaussian MIMO multi-receiver wiretap channels for 
which the noise covariance matrices Si, S 2 , S^ satisfy the following order 

-< Si d S 2 r< S z (55) 

In a multi-receiver wiretap channel, since the capacity region depends only on the conditional 
marginal distributions of the transmitter-receiver links, but not on the entire joint distribu- 
tion of the channel, the correlations among Ni,N 2 ,N^ do not affect the capacity region. 
Thus, without changing the corresponding capacity region, we can adjust the correlation 
structure among these noise vectors to ensure that they satisfy the Markov chain 

X -> Yi -> Y 2 ->■ Z (56) 

which is always possible because of our assumption about the covariance matrices in ( 155]) . 
Thus, for any Gaussian MIMO multi- receiver wiretap channel satisfying the order in (1551) . 
we can assume that it also exhibits the Markov chain in ( 156]) without changing the capacity 
region of the original channel. 

3.1 Comments on the Channel Model and the Covariance Con- 
straint 

We provide some comments about the way we define the Gaussian MIMO multi-receiver 
wiretap channel. The first one is about the covariance constraint in (1541 . Though it is more 
common to define capacity regions under a total power constraint, i.e., tr [E [XX T ] ) < P, 
the covariance constraint in ( |54l is more general and it subsumes the total power constraint 
as a special case [20] ■ In particular, if we denote the capacity region under the constraint in 
( 154]) by C(S), then the capacity region under the trace constraint, tr [E [XX T ]) < P, can 
be written as [20] 

C tracc (F) = [J C(S) (57) 

S:tr(S)<P 

Similarly, the inner and outer bounds obtained for the covariance constraint in ( 154]) can be 
extended to provide the corresponding inner and outer bounds for the total power constraint. 
The second comment is about our assumption that S is strictly positive definite. This 
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assumption does not lead to any loss of generality because for any Gaussian MIMO multi- 
receiver wiretap channel with a positive semi-definite covariance constraint, i.e., S >z and 
|S| = 0, we can always construct an equivalent channel with the constraint E [XX T ] ^ S' 
where S' >~ (see Lemma 2 of [20J ) , which has the same capacity region. 

The last comment is about the assumption that the transmitter and all receivers have 
the same number of antennas. This assumption is implicit in the channel definition, see 
(!BTl)-(!5"3l). and also in the definition of degradedness, see (l55l) . However, we can extend the 
definition of the Gaussian MIMO multi-receiver wiretap channel to include the cases where 
the number of transmit antennas and the number of receive antennas at each receiver are 
not necessarily the same by introducing the following channel model 

Y 1 = HiX + Nj (58) 
Y 2 = H 2 X + N 2 (59) 
Z = H Z X + N z (60) 

where Hi, H 2 , Hz are the channel matrices of sizes r% x t, r 2 x t, rz x t, respectively, and X 
is of size t x 1. The channel outputs Yi, Y 2 , Z are of sizes r± X 1, r 2 X 1, rz x 1, respectively. 
The Gaussian noise vectors Ni,N 2 ,N^ are assumed to have identity covariance matrices. 

Next, we introduce the definition of the degradedness for the channel model given in 
(!58~]) - (!6"0~]) [2Tj . The Gaussian MIMO multi-receiver wiretap channel in ( J58l) - fl60l) is said to 
be degraded (according to the Markov chain X — > Yi — > Y 2 — > Z) if the following two 
conditions hold: 

• There is a matrix D 2 i which satisfies H 2 = D 2 iHi and D 2 iD 2 r 1 ^ I, 

• There is a matrix D^ 2 which satisfies Hz = D^ 2 H 2 and D^ 2 D \ 2 -< I. 

In the rest of the paper, we consider the channel model given in (!5TT) - (l53j) instead of the 
channel model given in (!58l) - (!60j) . which is more general. However, the inner bounds, the 
outer bounds, and the capacity regions we obtain for the Gaussian MIMO multi-receiver 
wiretap channel defined by ( l5TT) - (|53l) can be extended to provide the inner bounds, the outer 
bounds, the capacity regions, respectively, for the Gaussian MIMO multi-receiver wiretap 
channel defined by fl58l - fl60l) using the analysis carried out in Section V of [21J and Section 

7.1 of [7]. Thus, focusing on the channel model in (!5Tl)-(l53l) does not result in any loss of 
generality. 

3.2 Degraded Channels 

We first provide an inner bound for the capacity region of the degraded Gaussian MIMO 
multi-receiver wiretap channel with public and confidential messages by using Theorem [TJ 
The corresponding achievable rate region is stated in the following theorem. 
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Theorem 4 An achievable rate region for the degraded Gaussian MIMO multi-receiver wire- 
tap channel with public and confidential messages is given by the union of rate tuples (R p \, R s i, 
R P 2,Rs2) satisfying 







Rs2 


< 


2 lD 




Rsi 


+ Rs2 


< 






Rs2 


+ Rp2 


< 




R. 


1 + Rs2 


+ Rp2 


< 




R s i + R< 


2 + Rpl 


+ Rp2 


< 





|S + S 2 | 


1, 

2 l0g 


|S + S Z | 


|K + S 2 | 


|K + S Z | 


|S + S 2 | 


+ 2 log 


IK + Sil 


|K + S 2 | 


|Si| 


|S + S 2 | 






|K + S 2 | 






|S + S 2 | 


+ 2 log 


|K + Ei| 


|K + S 2 | 


|Si| 


|S + S 2 | 


+ 2 log 


|K + Si| 


|K + S 2 | 





1, |s + s z | 

- log — ; : — 



1 |K + X 
- log — — — ■ 

2 S 



(61) 
(62) 
(63) 
(64) 
(65) 



where K is a positive semi-definite matrix satisfying K ^ S. 



This achievable rate region given in Theorem H] can be obtained by evaluating the achiev- 
able rate region in Theorem [1] for the degraded Gaussian MIMO multi-receiver wiretap 
channel by using the following selection for U, X: i) U is a zero-mean Gaussian random vec- 
tor with covariance matrix S — K, ii) X = U + U' where U' is a zero-mean Gaussian random 
vector with covariance matrix K, and is independent of U. We note that besides this jointly 
Gaussian (U, X) selection, there might be other possible (U,"K) selections which may yield 
a larger region than the one obtained by using jointly Gaussian (U, X). However, we show 
that jointly Gaussian (U, X) selection is sufficient to evaluate the achievable rate region in 
Theorem [1] for the degraded Gaussian MIMO multi- receiver wiretap channel. In other words, 
jointly Gaussian (U, X) selection exhausts the achievable rate region in Theorem [1] for the 
degraded Gaussian MIMO multi-receiver wiretap channel. This sufficiency result is stated 
in the following theorem. 

Theorem 5 For the degraded Gaussian MIMO multi-receiver wiretap channel, the achiev- 
able rate region in TheoremUl is exhausted by jointly Gaussian (U, X). In particular, for any 
non-Gaussian (U, X) ; there exists a Gaussian ([/ G ,X G ) which yields a larger region than the 
one obtained by using the non-Gaussian (U, X). 

Next, we provide an outer bound for the capacity region of the degraded Gaussian MIMO 
multi-receiver wiretap channel. This outer bound can be obtained by evaluating the outer 
bound given in Theorem [2] for the degraded Gaussian MIMO multi-receiver wiretap channel. 
This evaluation is tantamount to finding the optimal (U, X) which exhausts the outer bound 
in Theorem [2] for the degraded Gaussian MIMO multi-receiver wiretap channel. We show 
that jointly Gaussian (U, X) is sufficient to exhaust the outer bound in Theorem [2] for the 
degraded Gaussian MIMO channel. The corresponding outer bound is stated in the following 
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theorem. 



Theorem 6 The capacity region of the degraded Gaussian MIMO multi-receiver wiretap 
channel is contained in the union of rate tuples (Rpi, R s i, R P 2, Rsi) satisfying 

Rs2 < ^ Iom )' r ' r . - ~ log ^ =^ (66) 

1 

2"~° |K - Sol ' 2 " ° IE, I 2 
1 
2 
1 
2 

where K is a positive semi- definite matrix satisfying K H S 



1 |S + £ 2 | 1 pEC + Sij 1 |S + S Z | 
i? s i + R s2 < - log — , + - log — — log (67) 



|S + S 2 | 


-^log 


|S + S Z 


K + £ 2 | 


|K + S Z 


|S + S 2 | 


+ ^log 


K + Si 


K + S 2 | 


|Si| 


|S + S 2 | 






K + E 2 | 






|S + S 2 | 


+ ^log 


|K + Si 


K + S 2 | 





+ # s2 + R pl + # p2 < j-log ; Z z \ +^log '".^7 11 (69) 



The proofs of Theorem [5] and Theorem [6] are given in Appendix [D] We prove Theorem [5] 
and Theorem [6] by using the de Bruijn identity [HUE], a differential relationship between 
differential entropy and the Fisher information matrix, in conjunction with the properties of 
the Fisher information matrix. In particular, to prove Theorem |5l we consider the region in 
Theorem [TJ and show that for any non-Gaussian (U, X), there exists a Gaussian ([/ G ,X G ) 
which yields a larger region than the one that is obtained by evaluating the region in The- 
orem [1] with the non-Gaussian (U, X). We note that this proof of Theorem [5] implies the 
proof of Theorem [6j In particular, since the region in Theorem [1] includes all the constraints 
involved in the outer bound given in Theorem the proof of Theorem [5] reveals that for any 
non-Gaussian (U, X), there exists a Gaussian (U G , X G ) which yields a larger region than the 
one that is obtained by evaluating the region in Theorem [2] with the non-Gaussian (U, X). 

We note that the only difference between the inner and the outer bounds for the degraded 
Gaussian MIMO multi-receiver wiretap given in Theorem H] and Theorem El respectively, 
comes from the bound in (IMil . In other words, there is one more constraint in the inner 
bound given by Theorem H] than the outer bound given by Theorem [6j This additional 
constraint is 

p p p <r 1 i l S + S 2| ^ 1 . IK + Stl 1 |K + S Z | 

Rsi + R S 2 + Rp2<2 lo s | K + s 2 | + 2 lo s ~^?~\ 2 g [sg ^ 

Besides this constraint on + R s2 + -R p2 , the inner bound in Theorem @] and the outer 
bound in Theorem [6] are the same. 

We conclude this section by providing the cases where the inner bound in Theorem H] 
and the outer bound in Theorem [6] match. We first note that the inner bound in Theorem H] 
and the outer bound in Theorem [6] match when the confidential message rate of the first 
legitimate user is zero, i.e., R s ± = 0. The corresponding capacity region is given by the 
following corollary. 
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Corollary 4 The capacity region of the degraded Gaussian MIMO multi-receiver wiretap 
channel without the first legitimate user's confidential message is given by the union of rate 
tuples (Rpi, Rp2, R S 2) satisfying 

1 |S + S 2 | 1 |S + S Z | 

Rs2 ^2 l08 WT^\~2 l0S WT^\ (71) 

^ + ^^^ log |rti (72) 

# s2 + R pl + R P 2<\ log Ik+I'i + \ lo S ^ 73 ) 

where K is a positive semi-definite matrix satisfying K ^ S. 

We note that Corollary H] is the Gaussian MIMO version of Corollary [T] which obtains the 
capacity region of the degraded discrete memoryless multi-receiver wiretap channel without 
the first legitimate user's confidential message. Corollary 0] can be proved by setting R s \ = 
in both Theorem H] and Theorem [6] and eliminating the redundant bounds. 

We next note that the inner bound in Theorem H] and the outer bound in Theorem [6] 
match when the public message rate of the second legitimate user is zero, i.e., R P 2 = 0. The 
corresponding capacity region is stated in the following corollary. 

Corollary 5 The capacity region of the degraded Gaussian MIMO multi-receiver wiretap 
channel without the second legitimate user's public message is given by the union of rate 
tuples (Rpi, R s i, R s2 ) satisfying 

1 |S + E 2 | 1 |S + S Z | 

Rh2 < - log i r log r 74 

1 |S + S 2 | 1 IK + Sxl 1 |S + S Z | 

^ + ^ 2 ^ 2 log p^t^ + 2 log — [s^i — 2 log (75) 

it! sl + i? s2 + R pl < l - log l^+lj + 5 lo S ( 76 ) 

where K is a positive semi-definite matrix satisfying K ^ S. 

We note that Corollary is the Gaussian MIMO version of Corollary [2] which obtains the 
capacity region of the degraded discrete memoryless multi-receiver wiretap channel without 
the second legitimate user's public message. Corollary [5] can be proved by setting R p2 = 
in both Theorem H] and Theorem [6] and eliminating the redundant bounds. 

Corollary [5] also implies that the inner bound in Theorem H] and the outer bound in 
Theorem [6] match for the secrecy capacity region of the degraded Gaussian MIMO multi- 
receiver wiretap channel. In particular, the inner bound Theorem H] and the outer bound in 
Theorem [6] match if the rates of both public messages are set to zero, i.e., R p i = R p2 = 0. 
The secrecy capacity region of the degraded multi-receiver wiretap channel is given by the 
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following corollary. 



Corollary 6 (f7T ll8| ) The secrecy capacity region of the degraded Gaussian MIMO multi- 
receiver wiretap channel is given by the union of rate pairs (R s i,R S 2) satisfying 

1 |S + S 2 | 1 |S + S Z | 

Rs ^2 hg WT^\-2 log WT^\ (77) 

1 |S + S 2 | 1 [K + Stl 1 |S + S Z | 
^ 2 + R * ^ 2 bg |KT^i + 2 bg ~W~ " 2 l0g "W (78) 

where K is a positive semi- definite matrix satisfying K H S. 

We note that in addition to its representation in CorollaryEJ the secrecy capacity region of 
the degraded Gaussian MIMO multi-receiver wiretap channel can be stated in an alternative 
form as the union of rate pairs (R s i, R S 2) satisfying 

1 |S + S 2 | 1 |S + S Z | 

R ° 2 ^ 2 log |kT^| - 2 log |kTs7| (79) 

1 |K + S!| 1 |K + S Z | 
sl - 2 g HIiJ 2 g |Sj ^ 

where K is positive semi-definite matrix satisfying K ^ S. 
3.3 General Channels 

Here we consider the general, i.e., not necessarily degraded, Gaussian MIMO multi- receiver 
wiretap channel with public and confidential messages, and propose an inner bound for the 
capacity region of the general Gaussian MIMO multi-receiver wiretap channel as follows. 

Theorem 7 An achievable rate region for the general Gaussian MIMO multi-receiver wire- 
tap channel with public and confidential messages is given by 

conv (TZ 12 (K , K 1; K 2 ) U TZ 21 (K , K u K 2 )) (81) 

where 7£ 2 i(K , Ki, K 2 ) is given by the union of rate tuples (Rpi, R s i, Rp2, R S 2) satisfying 



D . 1 |K + Kx + K 2 + S.-l 1 |Ki + S 

Rsi S mm - log r— — H log 



=1,22 |Ki + K 2 + Sj| 2 |Ei| 

1. IKo + Kx + K. + SzI 1 |Ki + S z | , co> 

lOg : : lOg ; ; 82 

2 S K! + K 2 + S z 2 S -E z y ' 



3 The secrecy capacity region of the general, not necessarily degraded, Gaussian MIMO multi-receiver 
wiretap channel for an arbitrary number of legitimate users can be found in [7] . 
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. 1 iKo + Kx + Ka + Ej-l 1 |K X + K 2 
it S 2 < nun - log — — H — log" 



i=i,2 2 ° |Ki + K 2 + S 3 -| 2 ° |K! + S 2 



1 iKp + Kj + K. + Szl 

2 log |k7Ts^1 (83) 

1 1 __|K + K 1 + K 2 + E i | , 1 1 __|K 1 +K 2 + E 2 | 



Rsi + R S 2 < min - log — — — — — + - log 



3=1*2 ° |Ki + K 2 + £ 3 -| 2 ° |Ki + S 2 | 

1 |Ki + Si| 1 IKq + Kx + K. + SzI 

+ 2 bg ^ 2 bg jsj (84) 

1, IS + E.-I 1, IKi + Sil , v 

R , 1 + Rt1 < mm - log i^L^L- + _ log (85) 

«- + 5 jas 5 log | Kl +Kf+ Sj i + 5 log |k ; k +k + 2 eT 21 < 86 > 

„ i, |s + s,-| 1, iKi + Sil 

R« + R P1 + R S 2 < mm - log |Ki + K2 + s ., + ^ log "^^p 

1. iKi + Ka + Sal 1 iKi + K. + E^ 

+ 2 l0g |K 1 + £ 2 | 2 bg |K 1 + E Z | (87) 

1, IS + S.-I 1, iKx + Ka + Sal 

Rsi + R S 2 + Rp2 < mm - log f— — + - log 



i=i,2 2 °|Ki + K 2 + S 3 -| 2 ° |K! + S 2 



1. iKi + Exl 1 |K! + S Z 
+ - log — — — log 



2 |Si| 2 ° |S Z | v ' 

1, |S + S,-| 1, iKi + Ka + Sal 

+ ^ + Rs2 + R P 2 < mm - log |Ki + K2 + Sj| + 2 ^g | Kl + S 2 | 

+ ^ log n^r (89) 

for some positive semi-definite matrices K. ,~Ki,~K 2 satisfying Ko+Ki+K 2 ^ S. 7^i 2 (Ko, Ki, K 2 ) 
can 6e obtained from 72- 2 i(Ko, Ki, K 2 ) fry swapping the subscripts 1 and 2. 

The proof of Theorem [7J is given in Appendix [El We obtain the achievable rate region 
in Theorem [7J by evaluating the achievable rate region given in Theorem [3] with jointly 
Gaussian (Q, U, Vi, V^, X) having a specific correlation structure. In particular, Q,U are 
selected in accordance with superposition coding, and V\ , V 2 are encoded by using dirty- 
paper encoding [19J. 

We note that Theorem H] is a special case of Theorem [7J In other words, the achievable 
rate region in Theorem H] can be obtained from the achievable rate region in Theorem [7J To 
this end, one needs to consider only the region 7£ 2 i(Ko, Ki, K 2 ) with K 2 = (f), Ki = K, S = 
Ko + Ki. After eliminating the redundant bounds from the corresponding region, one can 
recover the achievable rate region provided in Theorem HI 
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4 Conclusions 



We study the multi-receiver wiretap channel with public and confidential messages. We first 
consider the degraded discrete memoryless channel. We provide inner and outer bounds 
for the capacity region of the degraded discrete memoryless multi-receiver wiretap channel. 
These inner and outer bounds partially match. Thus, we provide a partial characterization of 
the capacity region of the degraded discrete memoryless multi-receiver wiretap channel with 
public and confidential messages. Second, we provide an inner bound for the capacity region 
of the general, not necessarily degraded, multi-receiver wiretap channel. We obtain the inner 
bound for the general case by using an achievable scheme that relies on superposition coding, 
rate-splitting, binning and Marton's coding. Third, we consider the degraded Gaussian 
MIMO multi-receiver wiretap channel. We show that, to evaluate the inner and outer bounds, 
that we already proposed for the degraded discrete memoryless channel, for the Gaussian 
MIMO case, it is sufficient to consider only the jointly Gaussian auxiliary random variables 
and channel input. Consequently, since these inner and outer bounds partially match, we 
obtain a partial characterization of the capacity region of the degraded Gaussian MIMO 
multi-receiver wiretap channel with public and confidential messages. Finally, we consider 
the general, not necessarily degraded, Gaussian MIMO multi-receiver wiretap channel and 
propose an inner bound for the capacity region of the general Gaussian MIMO channel. 



A Proof of Theorem 2 



We define the following auxiliary random variables 

Ui = W s2 W p2 Yt l Z? +1 , i = l,...,n (90) 

which satisfy the following Markov chains 

Ui->Xi-> Y u ^Y 2i ^Zi, i = l,...,n (91) 

due to the fact that the channel is degraded and memoryless. For any (n, 2 nRpl , 2 nRsl , 2 nRp2 , 
2 nRs2 ) code achieving the rate tuple (Rpi, R s i, R p2 , R S 2), due to Fano's lemma, we have 

H(W s2 ,W p2 \Y 2 n ) <ne n (92) 
H{W 8U W pl \W s2 ,W p2 ,Y?) < ne n (93) 

where e n — > as n — > oo. Moreover, due to the perfect secrecy requirement in (CQ), we have 

I(W sl ,W s2 ;Z n )<n ln (94) 
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where 7 n — > as n — y oo. Next, we obtain the following 



H{W sl , W s2 ) < H{W sl , W s2 \Z n ) + n ln (95) 
< H(W sl , W s2 , W pl , W p2 \Z n ) + n ln (96) 



where ( 19511 comes from ( 1941) . Similarly, we obtain the following 

H(W s2 ) < H(W s2 \Z n ) + n ln (97) 
< H(W s2 ,W p2 \Z n ) + n ln (98) 

where ( l97|) comes from ( l94l) . Next, we introduce the following lemmas which will be used 
frequently. 

Lemma 3 ( [2], Lemma 7]) 

n n 

J^m^TMTt 1 ) = J2 I (T 2 - 1 ;T ll \Q,T^ +l ) (99) 
i=i i=i 

Lemma 4 

n 

I(W; T? \Q) - (W; T%\Q) = ]T I(W; T H \Q, 2?-\2£ i+1 ) ~ I(W; T 2i \Q, T[~\ T£ i+1 ) (100) 

i=\ 

Lemma H] can be proved by using Lemma [3j 
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First, we obtain an outer bound for the second legitimate user's confidential message rate 
R s2 as follows 

nR s2 = H(W s2 ) (101) 
<H(W s2 ,W p2 \Z n ) + n ln (102) 
= H(W s2 , W p2 ) - I(W s2 , W p2 ; Z n ) + n ln (103) 

< HW s2 , W p2 ; Y 2 n ) - I(W s2 , W p2 ; Z n ) + n(e n + 7n ) (104) 

■it 

= I(W s2 , W p2 ; Y 2i \Yt\Z« +l ) - I(W s2 , W p2 ; Z,\Yt\ Z? +1 ) + n(e n + ln ) (105) 

i=l 
n 

= J ^ 2 ' W & Y 2 i\Yt\Zl ¥l , Zi) + n( ln + e n ) (106) 

i=l 
n 

< W p2 , Yt\Yt\ Z? +1 ; Y 2i \Zi) + n{ ln + e n ) (107) 

i=l 
n 

= 1{w ^ w & y i~ x > z ^> Y ^ + "(^ + e «) ( 108 ) 

i=l 
n 

= HUi, Y 2t \Z,) + n( ln + e n ) (109) 

i=l 
n 

= HUi) Y 2l ) - I(U t ; Zi) + n( ln + en) (110) 



i=l 



where (j!02p comes from (|98|) . (11051) is due to Lemma HI The equalities in f 1 1 6 [) . (11081) . and 
(1 11 01) come from the following Markov chains 



w s2l w p2 , rr , ^r+i -> (in) 

W s2 , W p2 , Z?, Y 2l -> Yt 1 ^Yl 1 (112) 
*7< -> Y 2i ^Zi (113) 



which follow from the fact that the channel is degraded and memoryless. 
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Next, we obtain an outer bound for the confidential message sum rate R s \ + R s2 as follows 

n(R sl + R s2 ) = H(W sl ,W s2 ) (114) 

< H(W sl , W p i, W s2 , W p2 \Z n ) + n ln (115) 
= H(W sl , W pl , W s2 , W p2 ) - I(W sl , W pl , W s2 , W p2 ; Z n ) + n ln (116) 

< I(W sl , W pl ; Y?\ W s2 , W p2 ) + I(W s2 , W p2 ; Y 2 ) - I(W sl , W pl , W s2 , W p2 ; Z n ) 

+ n( ln + 2e n ) (117) 
= I(W sl , W pl ; Y?\W s2 , W p2 ) - I(W sl , W pl ; Z n \W s2 , W p2 ) 
+ I{W s2 , W p2 ; Y 2 n ) - I(W s2 , W p2 ; Z n ) + n{ ln + 2e n ) (118) 

n 

< I{W sl , W pl ; Y?\W s2 , W p2 ) - I(W sl , W pl ; Z n \W s2 , W p2 ) + ^ Y 2i ) - I(U i; Z t ) 

i=i 

+ n( ln + 2e n ) (119) 

n 

= HWsi, W pl ; Y u \W s2 , W p2 , Yt\ Z? +1 ) - I(W sl , W pl ; Zi\W s2 , W p2 , Y{~\ Z? +1 ) 

i=l 

+ I{Ui- Y 2l ) - I(U t ; Zi) + n( ln + 2e n ) (120) 
= HW.1, W pl ; Y u \Ui) - I(W sl , W pl - Zi\Ui) + I{U, t - Y 2t ) - I(U f , Z % ) + n( 7n + 2e n ) (121) 



i=i 



= I{Wsi, Wpi; Y U \U U Zi) + I(Uf, Y 2i ) - I(Ui; Z % ) + n{ ln + 2e n ) (122) 

i=l 
n 

< KWsU W pl ,Xt- Y u \Ui, Z{) + I(Ui, Y 2l ) - I(U t ; Z { ) + n{ ln + 2e n ) (123) 
i=i 

n 

= KXi] Y u \Ui, Zi) + I(Ui] Y 2l ) - I(Ui; Z t ) + n( 7n + 2e n ) (124) 
i=i 

n 

= KXi] Y U \U % ) - I(X t ; Zi\Ui) + I(U t ; Y 2l ) - I(U i; Zi) + n{ ln + 2e n ) (125) 
i=i 

= Y ^ U i) + HUi; Y 2i ) - I(X t ; Z t ) + n( 7n + 2e n ) (126) 



i=i 



where f TTT5|) comes from ® , ( TTT9|) is due to (TTTOjl . fTl20|) comes from Lemma gj fTL22]) . fTT24|) . 
f II 2 5 j) and f ll 26[) are due to the following Markov chain 

W sl , W pl , Ui^Xi^ Y u -)■ (127) 

which is a consequence of the fact that the channel is memoryless and degraded. 
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Next, we obtain an outer bound for the sum rate of the second legitimate user's public 
and confidential messages R p2 + R s2 as follows 

n(R p2 + R S 2) = H(W p2 , W s2 ) (128) 
<I(W s2 ,W p2 ;Y 2 n ) + ne n (129) 

n 

= HW.S2, W p2 - Y 2i \Yt 1 ) + ne n (130) 
i=i 

n 

= HW S 2, W p2 , Yt\ Z? +1 ; Y 2 i\Y 2 i ~ 1 ) - I{Yt\ Z? +1 ; Y 2l \W s2 , W p2 , KT 1 ) + ne n (131) 

n 

< I(W s2 , W p2 , Yt\ Yt\ Z? +l ; Y 2i ) - I{Y*-\ Z? +1 ; Y 2i \W s2 , W p2 , KT 1 ) + ne n (132) 

i=l 
n 

= I(Ws2, W p2 , Yt 1 , Z? +1 - Y 2l ) - I{Yt\ Z? +1 ; Y 2t \W s2 , W p2 , Y^ 1 ) + ne n (133) 

i=l 
n 

= HUi; Y 2i ) - I{Yt\ Z? +1 ; Y 2l \W s2 , W p2 , Y£~ l ) + ne n (134) 

i=l 
n 

<Y, HUH Y 2t ) + ne n (135) 



i=l 



where (11331) comes from the following Markov chain 

W s2 , W p2 , Z? +1 , Y 2l -)■ Yt 1 Yt 1 (136) 
which is a consequence of the fact that the channel is memoryless and degraded. 
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Finally, we obtain an outer bound for the sum rate R p \ + R s \ + R p2 + R S 2 as follows 

n(R pl + R sl + R p2 + R s2 ) = H(W pl , W 8l , W p2 , W s2 ) (137) 
= H(W p2 , W s2 ) + H(W pl , W sl \W p2 , W s2 ) (138) 

n 

< HUi] Y 2l ) - I(Yt\ Z? +1 ; Y 2i \Yt\ W s2 , W p2 ) + ne n + H(W pl , W sl \W p2 , W s2 ) (139) 
i=i 

n 

< I(Ui; Y 2i ) - I{Yt\ Z? +1 ; Y 2i \Yt\ W s2 , W p2 ) + I(W pl , W sl ; Y?\W p2 , W s2 ) + 2e n 

i=l 

(140) 

n 

= I(Ui\ Y 2l ) - I{Yt\ Z? +1 ; Y 2i \Yt\W s2 , W p2 ) + I(W pl , W sl ; Y lt \W p2 , W s2 , Y^ 1 ) 

i=l 

+ 2ne n (141) 

n 

< £ W; Y 2t ) - I{Yt\ Z? +1 ; Y 2l \Y^~\ W s2 , W p2 ) + I(W pl , W sl , Z? +1 ; Y lt \W p2 , W s2 , Y^ 1 ) 

i=l 

+ 2ne n (142) 

n 

= W; Y 2i) - I(Yr\ Z? +1 ; Y 2i \Yt\ W s2 , W p2 ) + Y u \ W p2 , W s2 , Y^ 1 ) 

i=l 

+ I(W pl , W sl ; Y lt \W p2 , W s2 , Yt\ Z? +1 ) + 2ne n (143) 

n 

= HUf, Y 2i ) - I{Yt\ Z? +1 ; Y 2i \Yt\W s2 , W p2 ) + Y u \W p2 , W s2 , Y^ 1 ) 

i=l 

+ I(W pl ,W sl ;Y lt \U t ) + 2ne n (144) 

n 

= HUi\ Yx) - I(Z? +1 ; Y 2i \Yt\ W s2 , W p2 ) - /(l?" 1 ; Y 2l \Y^\ W s2 , W p2 , Z? +1 ) 
i=i 

+ I{Z? +1 ; Y u \W p2 , W s2 , Yl l ) + I(W pl , W sl - Y u \U t ) + 2ne n (145) 

n 

= HUf, Y 2i ) - iiYt 1 ; z t \w s2l w p2 , z? +1 ) - /(rr 1 ; Y 2i \Yt\ w s2 , w p2 , z? +1 ) 

i=l 

+ /(y/- 1 ; Z z \W p2 , W s2 , Z? +1 ) + I(W pl , W sl ; Y lt \U t ) + 2ne n (146) 

n 

= KUi\ y 2i) ~ /(IT 1 ; ZAWa, W p2 , Z? +1 ) - I{Yt\ Y 2i \Yt\ W s2 , W p2 , Z? +1 ) 

i=l 

+ I{Yt\ Yt 1 ; Z z \W p2 , W s2 , Z? +1 ) + I(W pl , W sl ; Y ll \U l ) + 2ne n (147) 
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I{Ui\ Y*) - /(y/- 1 ; Y 2i \Yt\ W s2 , W p2 , Zf +1 ) + /(yf 1 ; Z t \W p2 , W s2 , Z? +1 , Y*- 1 ) 

i=i 

+ I(W pl ,W sl ;Y li \U i ) + 2ne n (148) 

n 

^ I{Ui- Y 2t ) - /(y/- 1 ; F 2l , Zi\Yt\ W s2 , W p2 , Zf +1 ) + /(If" 1 ; Z,| W^, W s2 , Zf +1 , yf 1 ) 

i=l 

+ /(W pl> W, 1 ;y li |?7 < ) + 2ne n (149) 

n 

^ /([/*; y 2i ) - /(yf 1 ; y 2i |yf \ W s2 , W p2 , Zf +1 , Z % ) + I(W pl , W sl - Y u \U t ) + 2ne n (150) 



< J] I(U f , Y 2i ) + /(W pl , Y u \U t ) + 2ne n (151) 
«=i 

n 

< KUu Y 2i ) + I(W pl , W sl , X f , Y U \UJ + 2ne n (152) 

i=l 
n 

= KUi\ Y 2i ) + I(X t ; Y u \Ui) + 2ne n (153) 



where ( I139P comes from ( I134p . (I146P is obtained by using Lemma |3l (I147P is due to the 
following Markov chain 

Yf 1 -> rf 1 -> W p2 , W s2 , Zf +1 , Z, (154) 

which comes from the fact that the channel is degraded and memoryless, (I149p is a conse- 
quence of the following Markov chain 

W s2 W p2 Y[- x Yl l Z^ x -> Y 2l -> Zi (155) 

which also comes from the fact that the channel is degraded and memoryless, and f)153p is 
due to the following Markov chain 

W sl W pl Ui Y u (156) 

which is a consequence of the fact that the channel is memoryless. The bounds in (IllOp . 
( I126p . ( I135P and (11 53[) can be single-letterized yielding the bounds given in Theorem |2j 



B Proof of Theorem [3 



Here, we first consider a more general scenario than the scenario introduced in Section 12.31 
In this more general scenario, the transmitter sends a pair of common public and confidential 
messages to the legitimate users in addition to a pair of public and confidential messages 
intended to each legitimate user. Thus, in this case, the transmitter has the message tu- 
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pie (W p o, W s o, W p i, W s i, W P 2, W S 2), where the common public message W p o and the common 
confidential message W s q are sent to both legitimate users, and a pair of public and confi- 
dential messages (W P j,W S j) are sent to the jth legitimate user, j = 1,20. Here also, there 
is no secrecy concern on the public messages W p q,W p i,W P 2 while the confidential messages 
W s0 , W s i, W s2 need to be transmitted in perfect secrecy, i.e., they need to satisfy the following 

lim -I(W s0 , W sl , W s2 ; Z n ) = (157) 

n— s-oo n 

The definition of a code, achievable rates, and the capacity region for this more general 
scenario can be given similar to the definitions of a code, achievable rates, and the capacity 
region we provided in Section [2j Here, we provide the proof of Theorem |3] in two steps. 
In the first step, we prove an achievable rate region for the more general scenario we just 
introduced. In the second step, we obtain the achievable rate region in Theorem [3] from 
the achievable rate region proved in the first step by using Fourier-Motzkin elimination in 
conjunction with the fact that since the common public and confidential messages W p o, W s q 
are decoded by both users, they can be converted into public and confidential messages 
(Wpi, W s i, W p2 , W S 2) of the legitimate users. 



B.l Part I 

We fix the joint distribution p(q, u, Vi,v 2 , x, yi,y2, z) as follows 

p(q, u)p(v h v 2 , x\u)p(yi, y 2 , z\x) (158) 

Next, we divide the common public message rate R p o into two parts as follows. 

R P o = Rpo + Rpo (159) 

In other words, we divide the common public message W p q into two parts as W p o = (W p q, Wpo), 
where the rate of W p0 is R p0 , and the rate of W p0 is R p0 . We use rate-splitting for the common 
public message because due to [2], we know that rate-splitting might enhance the achievable 
public and confidential message rate pairs even for the single legitimate user case. 

Codebook generation: 

• Generate 2 nRp0 length-n sequences q n through p(q n ) = YYi=i Pili) > an d index them as 
q n (w p0 ), where w p0 G {1, . . . , 2 nR p°}. 

• For each q n (w p o) sequence, generate 2 n ^ p0+Rs0+A °) length-n sequences u n through 

4 Another way to obtain the achievable rate region in Theorem [3] is to use rate-splitting for 
Wpi,W s i,W P 2,W S 2 as we mentioned earlier in Section However, we chose to introduce a pair of common 
public and confidential messages here, because the corresponding scenario results in an achievable scheme 
that encompasses the one we can obtain by using rate-splitting. 
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p(u n \q n ) = nr=i^( Mi l ( ? i )' an d m dex them as u n {w p o, w p o, w s q, do), where w p o G {1, . . . , 
2"^°}, w*o G {1, . . . , 2 nR °°},d G {1, . . . , 2" A »}. 

• For each u n (w p0 , w p o, w s0 , d ) sequence, generate 2 n ^ Rpl+Rsl+Al+Ll ^ length-n sequences 
t>" through p(t>™ | u n ) = nr=i P( v u\ u i)i and index them as v™{w p q, w p q, w s0 , d , w p i, w s i, di, 
h), where w pl G {1, . . . , 2 nR ^}, w sl G {1, . . . , 2 nR ^}, d x G {1, . . . , 2™ Al }, Z x G {1, . . . , 2 nLl }. 

• For each u n (w p o,w p o,w s o,d ) sequence, generate 2 n ^ Rp2+Rs2+A ' 2+L2 ^ length-n sequences 
v'2 through p(v% I u n ) = YY* =1 p(v 2 i\iii) , and index them as v%(w p0 , w p0 , w s0 , d , w p2 , w s2 , d 2 , 
h), where w p2 G {1, . . . , 2 nR ? 2 }, w s2 G {1, . . . , 2 nR ° 2 }, d 2 G {1, . . . , 2 nA2 }, l 2 G {1, . . . , 2™ L2 }. 

Encoding: Assume W p0 = w p0 ,W s0 = w s0 ,W p i = w pl ,W s i = w s i,W p2 = w p2 ,W s2 = w s2 
is the message to be transmitted. Randomly pick do,d\,d 2 . Next, we find an (h,l 2 ) pair 
such that the corresponding sequence tuple (q n , u n , i>™, ) is jointly typical. Due to mutual 
covering lemma [22J, if L\,L 2 satisfy 

L x + L 2 > I{V X ;V 2 \U) (160) 

with high probability, there exists at least one pair {l\,l 2 ) such that the corresponding 
sequence tuple (q n , u n ,v^, ) is jointly typical. 

Decoding: 

• The first legitimate user decodes [w p o, w s o, do, w p \, w s i, d x ) in two steps. In the first step, 
it decodes (w p0 , w s0 , d ) by looking for the unique (q n , u n ) pair such that (q n , u n , y™) is 
jointly typical. If the following conditions are satisfied, 

Rpo + Rso + Ao^IiU-^) (161) 
4o + # s o + A </([/; Y X \Q) (162) 

the first legitimate user can decode (w p o,w s o, do) with vanishingly small probability of 
error. 

In the second step, it decodes (w s %, w pX , d x ) by looking for the unique (q n , u n , v™) tuple 
such that (q n , u n , v™, y™) is jointly typical. Assuming that (w p0 , w s0 , d ) is decoded 
correctly in the first step, if the following condition is satisfied, 

R pl + R sl + A 1 + L 1 < I(Vi\ Yi\U) (163) 

the first legitimate user can decode (w p i,w s i,di) with vanishingly small probability of 
error. 
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• Similarly, the second legitimate user can decode (w p q, w s o, do, w p2 , w s2 , d 2 ) with vanish- 
ingly small probability of error if the following conditions are satisfied. 

R p0 + R s0 + A <I(U;Y 2 ) (164) 

4o + ^o + A </([/;y 2 |Q) (165) 
Rp2 + R S 2 + A 2 + L 2 <I{V 2 ;Y 2 \U) (166) 

Equivocation computation: We now show that the proposed coding scheme satisfies the per- 
fect secrecy requirement on the confidential messages given by (I157p . We start as follows. 

H(W s0 ,W sl ,W s2 \Z n ) 

>H(W s0 ,W sl ,W s2 \Z n ,Q n ) (167) 
= H(W s0 , W sl , W s2 , W p0 , W pl , W p2 , D , D x , D 2 \Z n , Q n ) 

- H(Wpo, W pl , W p2 , Do, D u D 2 \Z n , Q n , W sQ , W sl , W s2 ) (168) 
= H(W s0 , W sl , W s2 , W p0 , W pl , W p2 , Do, Di, D 2 \Q n ) 

- I(W s0 , W sl , W s2 , W p0 , W pl , W p2 , Do, D 1 , D 2 ; Z n \Q n ) 

- H(W p0 , W pl , W p2 , Do, D u D 2 \Z n , Q n , W s0 , W sl , W s2 ) (169) 
= H(W s0 , W sl , W s2 ) + H(W p0 , W pl , W p2 , D , D x , D 2 ) 

- I(W s0 , W sl , W s2 , W p0 , W pl , W p2 , Do, D u D 2 , Z n \Q n ) 

- H(W p0 , W p i, W p2 , Do, D u D 2 \Z n , Q n , W s0 , W sl , W s2 ) (170) 
= H{W s0 , W s i, W s2 ) + n(R p o + R pl + R p2 + A + A 1 + A 2 ) 

- I(W s0 , W sl , W s2 , W p0 , W pl , W p2 , Do, Di, D 2 ; Z n \Q n ) 

- H(W p0 , W pl , W p2 , Do, D,, D 2 \Z n , Q n , W sQ , W sl , W s2 ) (171) 

> H(W s0 , Wsi, W s2 ) + n(Rp + Rpi + R p2 + A + A 1 + A 2 ) 

- I(W s0 , W s i, W s2 , W p o, Wpi, W p2 , Do, D 1 , D 2 , U n , V?, V 2 n ; Z n \Q n ) 

- H(W p0 , Wpi, W p2 , Do, Di, D 2 \Z n , Q n , W s0 , W sl , W s2 ) (172) 
= H(W s0 , Wsi, W s2 ) + n(R p0 + R pl + R p2 + A + A 1 + A 2 ) 

- I(U n , V?, V 2 n ; Z n \Q n ) - H(W p0 , W pl , W p2 , D , D h D 2 \Z n , Q n , W s0 , W s i, W s2 ) (173) 

> H(W s0 , Wsi, W s2 ) + n{Rp + R pl + R p2 + A + A x + A 2 ) 

- n(I(U, Vi, V 2 ; Z\Q) + 7ln ) - H(W p0 , W pl , W p2 , D , D u D 2 \Z n , Q n , W s0 , W sl , W s2 ) 

(174) 

where fll70p -f TTTT]) follow from the facts that the messages W s0 , W sl , W s2 , W p0 , W pl , W p2 , D ,D 1 , 
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D 2 are independent among themselves, uniformly distributed, and also are independent of 
Q n , dESD stems from the fact that given the codewords {Q n , U n , V?, V™), (W s0 , W sX , W s2 , W pQ , 
W p i, W P 2, D Q , Di, D 2 ) and Z n are independent, dl 741) comes from the fact that 

I{U n , V?, V 2 n - Z n \Q n ) < nI{U, V x , V 2 ; Z\Q) + n lln (175) 

where 7i„ — > as n — > oo. The bound in (11 75ft can be shown by following the analysis 
in [23]. Next, we consider the conditional entropy term in (1 174ft . To this end, we introduce 
the following lemma. 

Lemma 5 We have 

H(W pl , W p2 , D u D 2 \Z\ Q n , W s0 , W sl , W s2 , % , D ) < n l2n (176) 

where 7 2ra — > as n oo, if the following conditions are satisfied. 

R pl + A x + U + R p2 + A 2 + L 2 < I(V U V 2 ; Z\U) + J(Vi; V 2 \U) (177) 
R pl + Ax + Lx < Z, V^) (178) 
i? p2 + A 2 + L 2 < I(V 2 ; Z, V X \U) (179) 

The proof of Lemma [5] is given in Appendix O Using this lemma, we have the following 
corollary. 

Corollary 7 We have 

H(W p0 , D \Z n , Q n , W s0 , W al , W s2 ) < n lzn (180) 
where 73„ — > as n — )■ oo, if the following condition is satisfied. 

Rp + A Q <I{U;Z\Q) (181) 

Now, we set the rates R p o, A , R p i, Ai, L±, R p2 , A 2 , L 2 as follows. 

R p0 + A = I{U; Z\Q) - e (182) 
L 1 + L 2 = /(y 1 ;\/ 2 |f/) + | (183) 

i2p! + A x + # p2 + A 2 = /(K, V 2 ; Z\U)-e (184) 
i? pl + A 1 + L 1 </(y 1 ;Z,y 2 |f/) (185) 
i? p2 + A 2 + L 2 < I(V 2 ; Z, Vtp) (186) 

In view of Lemma [5] and Corollary [3, the selections of R p o, A , R p i, Ai, Li, R p2 , A 2 , L 2 in 
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ffT82>ffT86|) imply that 



H(W p0 , W pl , W p2 , D , D x , D 2 \Z n , Q n , W s0 , W sl , W s2 ) 

= H(W p0 , D \Z n , Q n , W s0 , W s i, W s2 ) + H(W pl , W p2 , D lt D 2 \Z n , Q n , W s0 , W sl , W s2 , W p0 , D ) 

(187) 

<n( 72 „ + 7 3n ) (188) 

using which in (11741) . we get 

H(W s0 , W s i, W s2 \Z n ) > H(W s0 , Wsi, W s2 ) + n(R p0 + R pl + R p2 + A + A, + A 2 ) 

- n(I(U, V u V 2 ; Z\Q) + 7ln ) - n( l2n + 73n ) (189) 

Moreover, using ([182]) - f[18^|) in ffT89l . we have 

Q 

H(W s0 , W s i, W s2 \Z n ) > H(W s0 , W sU W s2 ) - - n( lln + l2n + 73n ) (190) 

which implies that the proposed coding scheme satisfies the perfect secrecy requirement on 
the confidential messages; completing the equivocation computation. 

B.2 Part II 

We have shown that rate tuples (R p o, R s $, R p \, R s \, R p2 , R s2 ) satisfying the following con- 
straints are achievable. 



L 1 + L 2 = I(V l ;V 2 \U) (191) 

Rp + Rso + A < min I(U; Yj) (192) 

i=i>2 

Rpo + Rso + Ao < min/(C/;^|Q) (193) 

J — 1 j 2 

Rpi + R s i + Ai+Li<I(Vi;Yi\U) (194) 

R p2 + R s2 + A 2 + L 2 <I(V 2 ;Y 2 \U) (195) 

kpo + A = I{U; Z\Q) (196) 

R pl + Ax + R p2 + A 2 = I(V U V 2 ; Z\U) (197) 

Rpi + Ax + Li < I(Vi; Z, V 2 \U) (198) 

R p2 + A 2 + L 2 < I(V 2 ; Z, Vi\U) (199) 
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We eliminate Ao from the bounds in fll91l) - fll99p by using Fourier-Motzkin elimination, which 
leads to the following region. 

L l + L 2 = I{V 1 -V 2 \U) (200) 

R p0 + R s0 + I(U; Z\Q) - R p0 < min I{U; Yj) (201) 

3=1,2 

R s0 < mm I(U;Yj\Q) -I(U;Z\Q) (202) 

3=1,2 

R pl + R sl + A 1 + L l <I{V 1] Y 1 \U) (203) 

R p2 + R s2 + A 2 + L 2 < I(V 2 ; Y 2 \U) (204) 

R pl +A 1 +R p2 + A 2 = I{V u V 2 ;Z\U) (205) 

R pl + A 1 + L 1 <I(V 1 ;Z,V 2 \U) (206) 

R p2 + A 2 + L 2 < I(V 2 ; Z, Vi\U) (207) 

< R p0 (208) 

Rpo < R P o (209) 

k p0 <I{U-Z\Q) (210) 

Next, we eliminate R p q from the bounds in fl200p - fl210l) by using Fourier-Motzkin elimination, 
which leads to the following region. 

L 1 + L 2 = I(V 1 ;V 2 \U) (211) 

R P o + Rso < min /(£/;!}) (212) 

R s0 < mm I {U ■ Y^Q) - I {U'Z\Q) (213) 

3=1, 2 

R pl + R sl + A l + L 1 <I(V 1 ;Y 1 \U) (214) 

Rp2 + R S 2 + A 2 + L 2 <I(V 2 ;Y 2 \U) (215) 

+ Ax + i? p2 + A 2 = 7(Vi, F 2 ; Z|C0 (216) 

^i + Ai + L^/^^^lC/) (217) 

R p2 + A 2 + L 2 <I(V 2 ;Z,V 1 \U) (218) 

(219) 
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Next, we eliminate L x from the bounds in (I211l) - (l219p by using Fourier-Motzkin elimination, 
which leads to the following region. 



R P o + Rso < min I(U; YA (220) 
3=1,2 

R s0 < min I{U; Y^Q) - I{U; Z\Q) (221) 

3=1,2 

R pl + R sl + A X + I(V X ; V 2 \U) -L 2 < I(V X ; Y X \U) (222) 

R P 2 + Rs2 + A 2 + L 2 <I(V 2 -Y 2 \U) (223) 

R pX + A x +R p2 + A 2 = I{V x ,V 2 ;Z\U) (224) 

R pl + A X + I(V X ; V 2 \U) -L 2 < I(V X ; Z, V 2 \U) (225) 

R p2 + A 2 + L 2 <I(V 2 ;Z,V 1 \U) (226) 

L 2 < I(V X ;V 2 \U) (227) 

< L 2 (228) 



Next, we eliminate L 2 from the bounds in fl220l) - (l228p by using Fourier-Motzkin elimination, 
which leads to the following region. 

R P o + Rso < min I(U; Y) (229) 

3=1,2 

R s0 < min I{U; Y S \Q) - I{U; Z\Q) (230) 

3=1.2 

R sX <I(V x ;Y x \U)-I(V x ;Z\U) (231) 

R S 2 < I(V 2 ; Y 2 \U) - I(V 2 ; Z\U) (232) 
Rsi + Rs2 < I(V X ; Y X \U) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) - I(V X , V 2 ; Z\U) (233) 

R pX + R sX + A x <I(V x ;Y x \U) (234) 

R P 2 + Rs2 + A 2 <I(V 2 -Y 2 \U) (235) 

R pX + A x <I(V x ;Z,V 2 \U) (236) 

R p2 + A 2 <I(V 2 ;Z,V x \U) (237) 

R pX + A 1 + R p2 + A 2 = I(V x ,V 2 ;Z\U) (238) 
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We eliminate Aj from the bounds in (12291) - (1238 j) by using Fourier-Motzkin elimination, which 
leads to the following region. 



R P o + Rso < min I(U; Yj) (239) 

R s0 < min I{U- Yj\Q) - I{U; Z\Q) (240) 

.7=1,2 

Rsi< IiV^W-IiV^ZlU) (241) 

R S 2 < I(V 2 ; Y 2 \U) - I(V 2 ; Z\U) (242) 
Rsi + R S 2 < I(Vi, Y X \U) + I(V 2 ; Y 2 \U) - I{V X - V 2 \U) 

-I{V X ,V 2 ;Z\V) (243) 

R sl + /(Fx, V 2 ; Z\U) - R p2 - A 2 < I{V X - Y X \U) (244) 

R p2 + R s2 + A 2 < I(V 2 ; Y 2 \U) (245) 

I(V X , V 2 ; Z\U) - R p2 - A 2 < I{V x] Z, V 2 \U) (246) 

R p2 + A 2 <I(V 2 ;Z,V 1 \U) (247) 

0<I{V l ,V 2 ;Z\U)-R pl -R p2 -A 2 (248) 

< A 2 (249) 



We eliminate A 2 from the bounds in (1239 1) - fl 2 4 9 j) by using Fourier-Motzkin elimination, which 
leads to the following region. 

R P o + Rso < min I(U; Yj) (250) 

R s0 < min I{U; Yj\Q) - I{U; Z\Q) (251) 
i=i,2 

Rsx<I{V^Y x \U)-I{V^Z\U) (252) 

R S 2 < I(V 2 ; Y 2 \U) - I(V 2 ; Z\U) (253) 

Rsi + Rs2 < I{V X ] Y 1 \U) + I(V 2 ; Y 2 \U) - V 2 \U) - I(V h V 2 ; Z\U) (254) 

Rpi + Rsi^IiVuY.lU) (255) 

R P 2 + Rs2<I(V 2 -Y 2 \U) (256) 

RpX^Uy^Z^U) (257) 

R p2 <I(V 2 ;Z,V 1 \U) (258) 

Rpi + Rp2<I(Vi,V 2 ;Z\U) (259) 



We note the fact that each legitimate user's own confidential message rate R S j can be given up 
in favor of its public message rate R P j, j = 1, 2, i.e., if the rate tuple (R p o, R s o, R p i, R s i, R p2 , R S 2) 
is achievable, the rate tuple (R p o, R s oi Rpi + &i, Rsi — «i 5 R P 2 + «2, R S 2 — C( 2 ) is also achievable 
for any non-negative (ai,a 2 ) pairs satisfying a x < R sX ,a 2 < R s2 . Using this fact for the 
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region given by f!250j) - (12591) . we obtain the following region. 



R P o + R s o < min I(U; Y 5 ) (260) 

3=1,2 

R s0 < mm I {U ■ Y^Q) - I {U-Z\Q) (261) 

j — 1 1 2 

R s i + ai < IiVi, Y 1 \U) - J(K; ^|C0 (262) 

# s2 + a 2 < /(V 2 ; F 2 |[/) - /(F 2 ; Z|C7) (263) 
i? s i + R S 2 + ai + a 2 < /(Vi; + J(F 2 ; y 2 |[7) - J(V i; V 2 |tf) - J(K, F 2 ; Z|C7) (264) 

R v i+R,i<I(y 1 - ) Y 1 \U) (265) 

Rp2 + R S 2 <I(V 2 ;Y 2 \U) (266) 

i2pi-ai < W;Z,V2|C/) (267) 

i^-aa^^^VilCO (268) 

R P i + R P 2-a 1 -a 2 <I(V 1 ,V 2 ;Z\U) (269) 

< ai (270) 

< a 2 (271) 

ai < R P i (272) 

a 2 < R p2 (273) 



We first eliminate oti from the bounds in (I260p - (12731) by using Fourier- Motzkin elimination, 
which leads to the following region. 

R P o + Rso < mm I(U; Y) (274) 

3=1,2 

R s0 < min I(U;Yj \Q) -I(U;Z\Q) (275) 

3=1,2 

Rsi < I{Vu Y,\U) - I(V i; Z\U) (276) 

R sl + R pl + R p2 -a 2 < J(y i; Y l \U)- I{V x] Z\U) + I{V U V 2 ; Z\U) (277) 

R sl + R pl + R s2 + a 2 < I{V X - Y 1 \U) + I(V 2 ; Y 2 \U) - I(V 2 ; Z\U) (278) 

R sl + R pl + R s2 + R p2 < I{V X - Y 1 \U) + I(V 2 ; Y 2 \U) - I(V i; V 2 \U) (279) 
Rsi + Rs2 + « 2 < I(Vi; Y 1 \U) + I(V 2 ; Y 2 \U) - V 2 \U) - I(V U V 2 ; Z\U) (280) 

R P 2-a 2 <I{V 1 ,V 2 ;Z\U) (281) 

R S 2 + a 2 < I{V 2 ; Y 2 \U) - I(V 2 ; Z\U) (282) 

Rpl + Rsi < I{Vi, Y 1 \U) (283) 

R P 2 + R S 2 < I(V 2 ;Y 2 \U) (284) 

R p2 -a 2 <I(V 2 ;Z,V 1 \U) (285) 

< a 2 (286) 

a 2 < R p2 (287) 
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Next, we eliminate a 2 from the bounds in (12 74 p - ( EST)) by using Fourier-Motzkin elimination, 
which leads to the following region. 



Rpo + Rso < wmI(U)Yj) 



(288) 



R s0 < min I(U; Yj\Q) - I(U; Z\Q) 

j=l,2 

R sl <I{V x] Y x \U)-I{V x] Z\U) 
R s2 <I(V 2 ;Y 2 \U)-I(V 2 ;Z\U) 



(289) 



(290) 
(291) 



Rsi + R S 2 < I(Vu Y X \U) + I{V 2 ; Y 2 \U) - 



iiy^v^-iiy^-z 



\U) (292) 



(293) 
(294) 
(295) 
(296) 
(297) 



R P 2 + Rs2<I(V 2 -Y 2 \U) 



R A + R p i + R s2 < I(V X ; Y l \U) + I(V 2 ; Y 2 \U) - 
R sl + R s2 + R p2 < I(V X \ Y 1 \U) + I(V 2 ; Y 2 \U) - 
R 8l + R pl + R s2 + R p2 < I(V i; Y 1 \U) + I(V 2 ; Y 2 \U) - 



I(V 2 -Z\U) 

i(Vr,z\u) 



We note the fact that since the common public message is decoded by both legitimate users, 
its rate R p q can be given up in favor of each legitimate user's own public message rate 
R P j, j = 1,2, i.e., if the rate tuple (R s0 , R p o, R s i, R p i, R s2 , R p2 ) is achievable, the rate tuple 
(RpO ~ Oi — (3, R s o, R p i + a, R s \, R p2 + (3, R s2 ) is also achievable for any non-negative (a, (3) 
pairs satisfying a + (3 < R p q. Using this fact for the region given by ( 12881) - ( j2"9"T1) . we obtain 
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the following region. 



a + fi + R s0 < min I(U; Yj) (298) 

i? s0 < min/(*7;Y;-|Q) -I{U;Z\Q) (299) 

< /(K; - /(Vi; Z|t7) (300) 

i? s2 < /(^ 2 ; >2|C/) - /(V 2 ; Z|?7) (301) 

-/(!/!, y 2 ;Z|C/) (302) 

i2pi-a + i2 a i</(K;ll|^) (303) 

R P 2-P + R S 2<I{V 2 -Y 2 \U) (304) 

i? sl + i? pl - a + i? s2 < /(K; niC/) + J(V 2 ; F 2 |C/) - /(V 2 ; Z|C/) (305) 

i2 a i + i? s2 + i? p2 - f3 < /(K; + /(V 2 ; F 2 |*7) - /(K; £|17) (306) 

i? sl + i? pl - a + R s2 + i? p2 - f3 < /(K; niC/) + J(V 2 ; F 2 |C/) - /(K; V 2 |17) (307) 

< a (308) 

< /3 (309) 

a < R p i (310) 

/3<i2p2 (311) 
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We eliminate a from the bounds in f l298l) - f)31ip by using Fourier- Motzkin elimination, which 
leads to the following region. 



p + R sQ < min I(U] Yj) (312) 
R s0 < min I{U;Yj\Q) -/([/; Z\Q) (313) 

3=1,2 

R sX <I(V x ;Y x \U)-I(V x ;Z\U) (314) 

R S 2 < I(V 2 ; Y 2 \U) - I(V 2 ; Z\U) (315) 
R s i + R S 2 < I{Vu Y l \U) + I(V 2 ; Y 2 \U)- i{v x - V 2 \U) 

-I(V X ,V 2 ;Z\U) (316) 

Rp2-P + Rs2<I(V 2 ;Y 2 \U) (317) 

i? sl + R s2 + R p2 -p< I(V X] Ki|Z7) + J(y 2 ; W - /(Vi; Z|17) (318) 

# sl + i? s2 + R p2 - $ < I(V x] Y X \U) + I(V 2 ; Y 2 \U) - I(V x] V 2 \U) (319) 

R s0 + + Rpi + R sl < min I(U; Yj) + I(V X ; Y X \U) (320) 

j — 1 j 2 

/? + R s0 + Rsi + + R S 2 < min 1(17; Yj) + I(V X ; Y X \U) + I(V 2 ; Y 2 \U) 

3=1,2 

-I(y 2 ;Z|[/) (321) 
i? s0 + + i?pi + R S 2 + R P 2 < min I(U- Yj) + Y X \U) + /(V 2 ; y 2 |C/) 

3 = 1,2 

-I(V X ;V 2 \U) (322) 

< /? (323) 

/3 < R p2 (324) 
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Next, we eliminate (3 from the bounds in (13 12ft - (13241) by using Fourier-Motzkin elimination, 
which leads to the following region. 

R s0 < min I{U;Yj\Q) -I(U;Z\Q) (325) 
3=1,2 

Rs^IiV^Y^-IiV^ZlU) (326) 

R S 2 < I(V 2 ; Y 2 \U) - I(V 2 ; Z\U) (327) 
Rsi + Rs2 < I{V X - Y 1 \U) + I(V 2 ; Y 2 \U)- I{V X - V 2 \U) 

-I(V U V 2 ;Z\U) (328) 

R s0 + R sl + R pl < min I(U; Yj) + I{V X] Y X \U) (329) 

3=1,2 

Rso + R S 2 + R P 2 < min !([/; Yj) + I(V 2 ; Y 2 \U) (330) 

j — 1 j 2 

R s0 + Rsi + R P i + R S 2 < min I(U; Yj) + J(F i; Y X \U) + I(V 2 ; Y 2 \U) 

3=1,2 

-I(V 2 ;Z\U) (331) 
i? s0 + + Rs2 + R P 2 < min I(U; Yj) + I(V i; Y t \U) + I(V 2 ; Y 2 \U) 

j — 1 1 2 

-J(F i; Z|?7) (332) 
R s0 + Rsi + R P i + R S 2 + R P 2 < min I(U; Yj) + I(V X \ Y X \U) + I(V 2 ; Y 2 \U) 

j — 1 j 2 

-J(y i; F 2 |C0 (333) 

We note the fact that since the common confidential message is decoded by both legitimate 
users, its rate can be given up in favor of each legitimate user's own confidential message 
rate R S j, j = 1,2, i.e., if the rate tuple (R p0 , R s o, R p i, R s i, R p2 , R s2 ) is achievable, the rate 
tuple (R p o, R s o — a — (3, R p i, R s i + a, R p2 , R s2 + j3) is also achievable for any non-negative 
(a, f3) pairs satisfying a + (3 < R s o- Using this fact for the region given by (13251) - (13331) . we 
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obtain the following region. 



a + < mmI(U',Yj\Q) -I(U;Z\Q) (334) 

j=l,2 

R s i - a < I{Vu Y^U)- /(K; Z\U) (335) 

R S 2-P< I(V 2 ; Y 2 \U) - I(V 2 ; Z\U) (336) 

Rsi + R S 2 ~ a - f3 < I(V i; Y 1 \U) + I(V 2 ; Y 2 \U) - 7(V i; V 2 \U) - I(V U V 2 ; Z\U) (337) 



f3 + R sl + R pl < min I{U; Yj) + J(V i; ^ 

i=i,2 

a + i? s2 + 77 p2 < min J(t7; + 7(F 2 ; F 2 

.7=1,2 

77 sl + R pl + R s2 < min I(U; Yj) + 7(V i; ^ 
i=i,2 

77 s i + i? s2 + i? p2 < min I(U; Yj) + 7(F i; Y 1 

i=i,2 

77 s i + 77 pl + R s2 + i? p2 < min J(t7; Y,) + /(K; Y 1 

i=i,2 

< a 
< p 
a < R s i 

P<Rs2 



u) 

U) 

U)+I(V 2 ;Y 2 \U)-I(V 2 ;Z\U) 
U)+I(V 2 ;Y 2 \U)-I(V 1 ;Z\U) 
U)+I(V 2 ;Y 2 \U)-I(V 1 ;V 2 \U) 



(338) 

(339) 

(340) 

(341) 

(342) 

(343) 
(344) 
(345) 
(346) 
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We eliminate a from the bounds in (13341) - (I346j) by using Fourier- Motzkin elimination, which 



leads to the following region. 

P < mm I(U;Y 3 1 Q) - I{U; Z\Q) (347) 

3=1,2 

R sX + p < mm I(U; Yj\Q) + I(V X ; Y X \U) - I(U, V x ; Z\Q) (348) 

3=1,2 

R S 2 ~ P < I(V X ; Y l \U) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) - I(V X , V 2 ; Z\U) (349) 
R S 2-P< I(V 2 ; Y 2 \U) - I(V 2 ; Z\U) (350) 
Rsi + R S 2 < min I{U- Yj\Q) + I(V X ; Y X \U) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) 

3=1,2 

-I(U,V X ,V 2 ;Z\Q) (351) 
R s2 + R p2 < min I(U; Yj) + I(V 2 ; Y 2 \U) (352) 

3=1,2 

P + Rsi + R P i < min I(U; Yj) + I(V X ] ^17) (353) 

3=1,2 

R sl + R pl + R s2 < min I(U; Yj) + I(V X ; Y X \U) + /(V 2 ; K 2 |C7) - J(V 2 ; (354) 

3=1,2 

R sX + R s2 + R p2 < min I(U; Yj) + I(V x] Y X \U) + I(V 2 ; Y 2 \U) - I(V X ; Z\U) (355) 

3=1,2 

R sX + R pX + R s2 + R p2 < min I(U; Yj) + I(V X ; Y X \U) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) (356) 

3=1,2 

R sX + 2R s2 + R p2 -p< min I(U; Yj) + I(V X ; Y X \U) + 2I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) 

3=1,2 

-I(V X ,V 2 ;Z\U) (357) 

< (358) 

P < Rs2 (359) 

0<I(V x ;Y x \U)-I(V x ;Z\U) (360) 
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We eliminate /3 from the bounds in (I347P - (13601) by using Fourier- Motzkin elimination, which 
leads to the following region. 

R sX < min I(U; Yj\Q) + I(V X ; Y X \U) - I(U, V x ; Z\Q) (361) 

3=1,2 

R s2 < min I(U; Yj\Q) + I(V 2 ; Y 2 \U) - I(U, V 2 ; Z\Q) (362) 

3=1,2 

R.i + Rs2 < min I(U; Yj\Q) + I(V X ; Y X \U) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) 

3=1,2 

-/(^,Vl,y 2 ;Z|Q) (363) 
+ i^i < min 1(17; 1}) + 7(V l5 Yi|J7) (364) 

3=1,2 

^2 + i? P 2 < min /([/; 5$) + 7(F 2 ; F 2 |t/) (365) 
i=i,2 

77 sl + R pX + 77 s2 < min I(U; Yj) + I(V X ; Y X \U) + 7(V 2 ; y 2 |tf) - 7(F 2 ; Z|C/) (366) 
3=1,2 

i2 sl + R pl + R s2 < min I(U; Yj) + 2J(K; Y X \U) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) 

3=1,2 

-7(^,^1*7) (367) 
77 sl + 77 s2 + 7? p2 < min I(U; Yj) + I(V X ; Y X \U) + I(V 2 ; Y 2 \U) - I{V X ; Z\U) (368) 

3=1,2 

77 sl + 77 s2 + R p2 < min I(U; Yj) + I(V X ; Y X \U) + 2I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) 

3=1,2 

-I(V 1} V 2 ;Z\U) (369) 
R sX + R pX + R s2 + R p2 < min I(U; Yj) + I(V X ; Y X \U) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) (370) 

3=1,2 

< min I(U;YAQ) - I(U;Z\Q) (371) 

3=1,2 

0<7(y 1 ;F 1 |C/)-7(y 1 ;Z|C7) (372) 

< I{V 2 ;Y 2 \U) -I{V 2 -Z\U) (373) 

< I(V X ; Y X \U) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) - I(V X , V 2 ; Z\U) (374) 

Finally, we note that we can remove the bounds in fl371l) - fl374l) without enlarging the region 
given by fl361l) - fl370p . which will leave us with the desired achievable rate region given in 
Theorem [3] completing the proof. 



C Proof of Lemma [5 

Assume that the eavesdropper tries to decode W pX , D X ,L X , W p2 , D 2 , L 2 by using its knowledge 
of (W s0 , W sX , W s2 , W p o). In particular, assume that, given (W s0 = w s0 , W sX = w s i,W s2 = 
w sX , W p o = w p o), the eavesdropper tries to decode W pX , D X ,L X , W p2 , D 2 , L 2 by looking for the 
unique (V x , V 2 ) such that (q n , u n , v x , v 2 , z n ) is jointly typical. There are four possible error 
events: 

• £q — {(q n , u n , v™, v% , z n ) is not jointly typical for the transmitted (q n , u n , v™, f 2 )}, 
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£f = {(Wpi, Di, Li) ^ (1, 1, 1), (W P 2, D 2 , L 2 ) ^ (1,1,1), and the corresponding tuple 
(q n , u n , v ™, v% , z n ) is jointly typical}, 

£fi = {(W pl ,D 1 ,Li) = (1,1, 1), (W P 2,D 2 ,L 2 ) ^ (1,1,1), and the corresponding tuple 
(q n , u n , v v% , z n ) is jointly typical}, 

£f u = {(W p i, Di, Li) 7^ (1, 1, 1), (W p2 , D 2 , L 2 ) = (1,1, 1), and the corresponding tuple 
(q n , u n , v™, v%, z n ) is jointly typical}, 



Thus, the probability of decoding error at the eavesdropper is given by 

Pr[£ e ] = Pr[£ e U E\ U ^ U 

<Pr[£ e ]+Pr[^]+Pr[^] + Pr[£ 
<e ln + Pr[£/] + Pr[^]+Pr[£ 



-■I 

ml 



(375) 
(376) 
(377) 



where we first use the union bound, and next the fact that Pr[£p] < e ln for some t\ n satisfying 
ein — > as n — > oo, which follows from the properties of the jointly typical sequences [13]. 
Next, we consider the first term in (1377p as follows 



Pr[^ e ] < Pl ^ n > < V ^ V ^ ^ G ^ 



(™ p l,<il,Zl)^(l,l,l 
K2,4,(2)^(l,l,l 



< 



(^2^2,22)^(1,1,1 



< 



< 



E 

2,i 2 )# 

E 

l,Jl)?4 

E 
E 
E 



(to„ 2) £ia ,12)^(1,1,1 



(w p i,<ii,2i)^(l,l,l 

(Ulp2,d2,/2)^(1,1,1 



Ki,di,«i)^(i,i,i 

(topa.da ,12)^(1,1,1 



(Wpl,dl,/l)^(l,l,l 
(Wp2,d2,*2)^(l,l,l 



p(v?\u n ) P (v%\u n )p(z n \u n ) 



(378) 
(379) 



^2 2 _n(H(yi|l/) ^ 7E) 2" n(H(v ' 2|c/) " 7E) 2" n( ^ (z|c/) " 7e) (380) 
(«™,«2*,« n )e^? 



^n\^-n{H{Vi\U)+H{V2\U)+H{Z\U)-^ € ) 

2n(H(Viy2,Z\U)+-y,)2-n(H(Vi\U)+H(V2\U)+H(Z\U)-3-y f _) 

2~n(I(Vi,V2;Z\U)+I(V2;Vi\U)-4:~f e ) 



< 2n(Rpi+^i+Li+R P 2+A 2 +L 2 )2-n(I(VuV2-,Z\U)+I(V 2 -,Vi\U)-4r re ) 



(381) 
(382) 
(383) 
(384) 



where A™ denotes the typical set, % is a constant which is a function of e, and satisfies 
7 e as e 0, (I379j) comes from the way we generated the sequences (q n , u n ,Vi, v 2 ), ( 1380 j) 
stems from the properties of the typical sequences [13] , and fj382j) comes from the bounds on 
the size of the typical set A™ [13]. Equation (13841) implies that Pr[£f] vanishes as n — > oo if 
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the following condition is satisfied. 



R pl + A 1 + L 1 + R p2 + A 2 + R p2 < J(K, V 2 ; Z\U) + I(V 2 ; V X \U) - 4 7e (385) 
Next, we consider Pr[£fJ as follows 

Pr[5£] < Pr ^", u "« <> ^> e A:] (386) 

K,2,(fe,k)^(l,l,l) 

< E E pKKM^KX) (387) 
(«V 2 ,<fe,k)/(i,i,i) K,z«)e,A2 

< 2- n ( H ( y2 l l/ )->)2" ?l(H(z|l/ ' v ' l) - 7E) (388) 

(w p2 ,o!2,«2)^(l,l,l) K,z")€.A™ 
= |^n| 2 -n(i?(V 2 |C/)- 7 e) 2 -n(H(^|a,yi)- 7e ) (ggg) 

K2,d2,« 2 )^(l,l,l) 

< ^ 2" ( ^ (y2 ' z|l/ ' v ' l)+7E) 2~™ ( ^ (l/2|c/) " 7e) 2" n(H(z|c/ ' yi) "' rf) (390) 

(Wp2,d2,«2)^(l,l,l) 

= Y 2- n{I(V2 < z ' Vllu) - 3 ^ ) (391) 

(•^2,^2)^(1,1,1) 

< 2™(-Rp2+A2+L 2 )2-n(-f(V2;^,Vi|(7)-37 f ) (392) 

where (13871) comes from the way we generated sequences (q n ,u n ,v™,v 2 ), f!388j) is due to the 
properties of the typical sequences p3] , and (13901) comes from the bounds on the typical set 
A™ [13]. Equation (13921) implies that Pr[£fJ — > as n — )■ oo if the following condition is 
satisfied. 

R p2 + A 2 + L 2 <I(V 2 ;Z,V 1 \U)-3% (393) 

Similarly, we can show that Pr[£Sj — > as n — > oo if the following condition is satisfied. 

R pl + Ax + L x < /(K; Z, y 2 |C7) - 3 7e (394) 

Thus, we have shown that if the rates (R p i, A l5 L l5 R p2 , A 2 , L 2 ) satisfy (I385p . (13931) . (13941) . the 
eavesdropper can decode W p ±, D 1 ,Li, W p2 , D 2 , L 2 by using its knowledge of (W s o, W s i, W s2 , 
W p o), i.e., Pr[£ e ] vanishes as n — > oo. In view of this fact, using Fano's lemma, we get 

H(W ph D h L u W p2 , D 2 , L 2 \Z n , Q n , W s0 , W sl , W s2 , W p0 , D ) < n l2n (395) 

where 7 2n — > as n — > oo; completing the proof. 
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D Proofs of Theorems [5] and [6 



D.l Background 

We need some properties of the Fisher information and the differential entropy, which are 
provided next. 

Definition 1 (|7J, Definition 3) Let (U.X) be an arbitrarily correlated length-n random 
vector pair with well-defined densities. The conditional Fisher information matrix o/X given 
U is defined as 



J(X|U) = E [p(X|U)p(X|U) T ] 



(396) 



where the expectation is over the joint density /(u, x), and the conditional score function 
p(x|u) is 



p(x|u) = Vlog/(x|u) 



<91og/(x|u) 



<91og/(x|u) 



(397) 



dx\ dx n 
We first present the conditional form of the Cramer- Rao inequality, which is proved in [7J . 



Lemma 6 (0, Lemma 13) Let U, X be arbitrarily correlated random vectors with well- 
defined densities. Let the conditional covariance matrix of X be Cov(X|U) >- 0, then we 
have 

J(X|U) h Cov(XlU)- 1 (398) 

which is satisfied with equality if (U, X) is jointly Gaussian with conditional covariance 
matrix Cov(X|U). 

The following lemma will be used in the upcoming proof. The unconditional version of 
this lemma, i.e., the case T = 0, is proved in Lemma 6 of [TJ. 

Lemma 7 ([7J, Lemma 6) Let T,U,Vi,V2 be random vectors such that (T,U) and 
(Vi, V 2 ) are independent. Moreover, let V l5 V 2 be Gaussian random vectors with covariance 
matrices Si, S 2 such that -< S x ^ S 2 . Then, we have 

J-^V + V 2 |T) - S 2 y J^OJ + Vi|T) - Si (399) 

The following lemma addresses the change of the Fisher information with respect to 
conditioning. 
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Lemma 8 ([7J, Lemma 17) Let (V,U,X) be length-n random vectors with well-defined 
densities. Moreover, assume that the partial derivatives o//(u|x, v) with respect to Xj, i = 
1 , . . . , n exist and satisfy 



max 

Ki<n 



3/(u|v,x) 



< g(u) (400) 



for some integrable function g(u). Then, if(U, V, X) satisfy the Markov chain U — > V — > X, 
we have 

J(X|V) y J(X|U) (401) 

The following lemma will also be used in the upcoming proof. 

Lemma 9 (|7J, Lemma 8) Let K 1; K 2 be positive semi-definite matrices satisfying ^ 
Ki ^ K.2, and f(K) be a matrix-valued function such that f(K) y /or Ki ^ K ^ K 2 . 

Moreover, f(K) is assumed to be gradient of some scalar field. Then, we have 

/ f (K)dK > (402) 

The following generalization of the de Bruijn identity (TElEl] is due to [17], where the 
unconditional form of this identity, i.e., U = <f), is proved. Its generalization to this condi- 
tional form for an arbitrary U is rather straightforward, and is given in Lemma 16 of [7]. 



Lemma 10 (|7J, Lemma 16) Let (U,X) be an arbitrarily correlated random vector pair 
with finite second order moments, and also be independent of the random vector N which is 
zero-mean Gaussian with covariance matrix Sat y 0. Then, we have 

V SjV /i(X + N|U) = ij(X + N|U) (403) 

The following lemma is due to [251 126] which lower bounds the differential entropy in 
terms of the Fisher information matrix. 

Lemma 11 ( |25LI26| ) Let (£/, X) be an (n + 1)- dimensional random vector, where the con- 
ditional Fisher information matrix o/X, conditioned on U , exists. Then, we have 

h(X\U) > ^log|(27re)J- 1 (X|f/)| (404) 

We also need the following fact about strictly positive definite matrices. 

Lemma 12 Let A,B be two positive definite matrices, i.e., A y 0, B y 0. If A H B, we 
have A' 1 y B \ 
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D.2 Proofs 

First, we prove Theorem [5] by showing that for any (U, V, X), there exists a Gaussian 
(f/ G ,y G ,X G ) which provides a larger region. Essentially, this proof will also yield a proof 
for Theorem [6] because the outer bound in Theorem [2] is defined by the same inequalities 
that define the inner bound given in Theorem [1] except the inequality in (TXT]) . Thus, we only 
provide the proof of Theorem [5j 

First step: We consider the bound on R s2 given in ([8]) as follows 

R s2 <I(U;Y 2 )-I(U;Z) (405) 
= [h(Y 2 ) - h(Z)} + [h(Z\U) - h(Y 2 \U)} (406) 



First, we consider the first term in (14061) as follows 



h{Z) - h(Y 2 ) = 1 [ Z J(X + N)dX N (407) 

which follows from Lemma [TD1 and N is a Gaussian random vector with covariance matrix 
satisfying £ 2 ^ ^ Y>z- We note that due to Lemma El we have 

J(X + N) y (Cov(X) + -En)- 1 h(S + Sjv) -1 (408) 

where the second inequality comes from Lemma [121 and the fact that E [XX T ] -< S. Using 
this inequality in (140 7p . we get 

h{Z) - h{Y 2 ) > i / \s + EaO-VEjv (409) 

^ogll^i (410) 



2 °|S + S 



2 



where (14091) comes from Lemma [91 

Next, we consider the second term in (I406[) as follows 



S, 



h(Z\U) -h(Y 2 \U) = l - I JiX • N|/')(/Sx (111) 



which follows from Lemma [TO], and N is a Gaussian random vector with covariance matrix 
S^r satisfying £ 2 ^ Sat ^ S^. Using Lemma for any S^r satisfying £ 2 ^ Sat ^ S^, we 
have 

J- X (X + N 2 \U) - S 2 ^ J- X (X + N|Z7) - Sat r< J _1 (X + N Z |C/) - S z (412) 
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Due to Lemma [T2l the inequalities in f |412j) imply 

[J-\X + N Z \U) -Hz + UnY 1 ■< J(X + N|C7) ■< [J-^X + r^C/) -£ 2 + £ JV ]~ 1 (413) 
Using these inequalities in (141 ip in conjunction with Lemma [9j we get 



2 to |J-i(X + N z ) -£ z + £ 2 | - v 1 ' v Z| y " 2 to |J- 1 (X + N 2 )| 

(414) 

which can be expressed as 

/(0)<A(Z|tO-^(Y 2 |l7)</(l) (415) 

where f(t) is defined as 

and Ki(t) is given by 

Ki(t) = (1 - t) [J^X + N z |f/) - £ z ] + 1 [J- X (X + N 2 |C7) - S 2 ] (417) 

Since f(t) is continuous in £, due to the intermediate value theorem, there exists a t* such 
that < t\ < 1, and 



/(^) = MZ|l7)-fc(Y 2 |C0 (418) 

1 |Ki + E z | , , 

= 2 l0g TK7TE^ (419 > 

where Ki = Ki(i*). Since < t* < 1, Ki satisfies 

J- X (X + N 2 |C/) - S 2 ^ Ki ^ J- X (X + N z |[7) - £ z (420) 

in view of (14171) . Moreover, we have 

K x r< J- X (X + N Z |C7) -E z (421) 

r< J~ 1 (X + N Z )-E Z (422) 

r< Cov(X + N z ) - £ z (423) 

r< Cov(X) (424) 

r< S (425) 

where (14221) is due to Lemma El and (14231) comes from Lemma El Thus, in view of (14201) and 
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(14251) . Ki satisfies 



J _1 (X + N 2 |^) - S 2 r< Kx r< S (426) 
Now, using (141 Op and (I419P in (14061) . we get the following bound on R s2 

R S 2 < - log , |S + E21 , - - log , |S + Sz| , (427) 
"2 8 |Ki + £ 2 | 2 S |K! + S Z | 1 ; 

which completes the first step of the proof. 

Second step: We consider the bound on the confidential message sum rate R s i + R s2 given 
in (jHJ) as follows 

Rsi + Rs2 < I(U; Y 2 ) + /(X; Y^U) - /(X; Z) (428) 
= [h(Y 2 ) - h(Z)} + MY^U) - h(Y 2 \U)} - ^log^ (429) 

< ^ lo s|f^^| + l h (Yi\U) - MY 2 |f/)] -|logj^|j ( 43 °) 
where (14301) comes from (I410p . Next, we consider the remaining term in (143 Op as follows 

h{Y 2 \U)-h{Y 1 \U)= l - f * J{X + N\U)dV N (431) 

which follows from Lemma [TOj and N is a Gaussian random vector with covariance matrix 
satisfying Si ^ Sat ^ S 2 . Due to Lemma [TJ for any Gaussian random vector N with 
Sat -< £ 2 , we have 

J _1 (X + N|Z7) - < J- X (X + N 2 |£/) - S 2 (432) 

=< Ki (433) 

where (14331) comes from (I426P . In view of Lemma [121 fl433j) implies 

J(X + N|C7) b (Ki + S^)- 1 , Sjv^S, (434) 

Using (14341) in (143 ip in conjunction with Lemma [91 we have 



1 ' s 



h(Y 2 \U) - HY.IU) > - I (Ki + Eat)- 1 ^ (435) 

-~ -'Si 



1 |Kx + S 2 | 

2 log ^7T^ (436) 
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Using (H5Bj) in (H30|) . we get 

1 |S + £ 2 | 1 IKx + SxI 1 |S + S Z | 

^ + ^ 2 ^ 2 log iktt^ + 2 log n^i — 2 log ~w (437) 

which completes the second step of the proof. 

Third step: We consider the bound on R s2 + R P 2 given in (TTDT) as follows 

R P 2 + R S 2 < I{U; Y 2 ) (438) 

= /i(Y 2 )-/i(Y 2 |E7) (439) 

< 1 log |(27re)(S + E 2 )| - fc(Y 2 |E7) (440) 

where (I440p comes from the maximum entropy theorem [13]. Next, we consider the remaining 
term in (1440 p . Using (14191) . we have 

h(Y 2 \U) = h(Z\U) -hog ^+^1 ( 441 ) 

> i log |(2 7 re)J- 1 (X + N Z \U)\ - I log (442) 

> \ log | (2vre) (K x + E*) | - \ log ^ ( 443 ) 
= ilog|(27re)(K 1 + S 2 )| (444) 

where (14421) is due to Lemma [IT], and (1443 \ comes from (14211) and monotonicity of | • | in 
positive semi-definite matrices. Using (14441) in (1440 p . we get 

R p2 + R S 2<\ log i^ + s 2 ^ ( 445 ) 

which completes the third step of the proof. 
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Fourth step: We consider the bound in (TTTj) as follows 



R aX + R p2 + R s2 < I(U;Y 2 ) + /(X; Y 1 \U) - /(X; Z\U) (446) 
= h(Y 2 ) - h(Y 2 \U) + IHY^U) - h(Z\U)} - \ log ^4 ( 447 ) 

< ^log|(27re)(S + E a )| - h(Y 2 \U) + [h(Yx\U) - h(Z\U)} - ^log j|4 (448) 

< i log | (27re) (S + S x ) | - i log | (2yre) (K x + S 2 ) | + | U) - h{Z\ U)} 

(449) 





1 

2 10 




1 


log- 


|S + S 2 | 


~ 2 


IKx + SsI 


1 


log- 


|S + S 2 | 


~ 2 


|K! + I! 2 | 


1 

< - 
~ 2 


log- 


|S + S 2 | 


|Ki + S 2 | 


1 


log- 


|S + S 2 | 


~ 2 


|K! + I! 2 | 



+ [/iCYilCO " HY 2 \U)\ + [h(Y 2 \U) - fc(Z|l/)] - \ log M (450) 

+ [/i(Yi|C7) - h(Y 2 \U)} + ltog J^+gl -ilog||i| (451) 

1, iKi + Sil 1, |Ki + S 2 | 1, ISJ . . 

+ - log + - log - - log i-^ 452 

2 g — [ST] 2 g ^ ^ 

where (1448 p comes from the maximum entropy theorem [13] , (j449j) comes from (14441) . (14511) 
is due to flUHp , and (14521) comes from (14361) . 

Fifth step: We consider the bound in ( |T2l) as follows 

i? pl + i? sl + R p2 + R s2 < I(U; Y 2 ) + /(X; Y X \U) (454) 
= h(Y 2 ) + [KY^U) - h(Y 2 \U)} - l - log |(27re)Ei| (455) 

< ilog|(2 7 re)(S + S 2 )| + [h{Y x \U) - h(Y 2 \U)} - ~ log |(2vre)S 1 | (456) 

< i log | (27re) (S + S a ) | + \ log - 5 log I (27re)S a | (457) 

!, I s + S 2| 1, |Ki + Ei| 

= - log ^ ^ + - log - — ■ : — - (458) 

2 & |Ki + S 2 | 2 6 |Si| v ' 

where (I456P comes from the maximum entropy theorem [13], and (I457P comes from (14361) . 

Hence, we have shown that for any feasible (U, X), there exists a Gaussian ([/ G ,X G ) 
which yields a larger rate region. This completes the proof. 



E Proof of Theorem H 

We now obtain an alternative rate region by using the one given by (l36ip -( l3~T4"p . This 
alternative region is more amenable for evaluation for the Gaussian MIMO channel. We 
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note that the following region is included in the region given by (I36ip - (l374p . 

R sX < min I(U; Y 3 \Q) + I(V X ; Y X \U) - I(V X ; V 2 \U) - I(U; Z\Q) 

-I(V X ;Z\U,V 2 ) (459) 
R s2 < min I(U; Y 3 \Q) + I(V 2 ; Y 2 \U) - I(U, V 2 ; Z\Q) (460) 

j=l,2 

Rsi + Rs2 < min I(U; Yj\Q) + I(V X ; Y X \U) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) 

.7=1,2 

-I(U, V x , V 2 -Z\Q) (461) 

R sX + R P i < min I(U; Yj) + 7(V i; ^1*7)- I(V X ; V 2 \U) (462) 
.7=1,2 

^2 + R P 2 < min 7(£/; Yj) + I(V 2 ; Y 2 \U) (463) 
i=i,2 

+ + fl s2 < min I(Z7; + I(V X ; Y X \U) + J(y 2 ; r 2 |?7) - 7(V i; V 2 |E/) 
.7=1,2 

-I(V 2 ;Z\U) (464) 

# sl + i? s2 + R p2 < min 7(*7; Yj) + I(V X ; Y X \U) + J(V 2 ; y 2 |C7) - 7(V l5 V 2 |£7) 
.7=1,2 

-/(y i; z|c/,y 2 ) (465) 

i2 fl i + Rp X + R s2 + R p2 < min I(U; Yj) + I(V X ; Y X \U) + 7(F 2 ; F 2 |£f) - I(V X ; V 2 \U) (466) 

.7=1,2 

0< min I(U; Yj \ Q) -1(17; Z\Q) (467) 

.7=1,2 

< I{V X - Y X \U)- I(V X ; V 2 \U) - I(V X ; Z\U, V 2 ) (468) 
0<I{V 2 ;Y 2 \U)-I{V 2 ;Z\U) (469) 
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We note that we can remove the constraints given by (I467l) - (l469p without enlarging the 
region given by (I459P - (14661) . which will leave us with the following region. 



R sl < min I(U; Yj\Q) + I{V x] Y 1 \U) - I(V x] V 2 \U) - I(U; Z\Q) 

-I(V X ;Z\U,V 2 ) (470) 
R s2 < min I{U; Yj\Q) + I(V 2 ; Y 2 \U) - I(U, V 2 ; Z\Q) (471) 

j=l,2 

Rsi + Rs2 < min I(U; Yj\Q) + I(V X ; Y 1 \U) + I(V 2 ; Y 2 \U) - I(V X ; 

.7=1,2 

- I(U,V X ,V 2 ;Z\Q) (472) 

77 sl + i?pi < min I(U; Yj) + I(V X ; Y X \U) - I(V X ; V 2 \U) (473) 
.7=1,2 

7? s2 + 77 p2 < min I(U; Yj) + I(V 2 ; Y 2 \U) (474) 
,7=1,2 

77 sl + R pl + R s2 < min I(U; Yj) + I(V X ; Y X \U) + 7(F 2 ; y 2 |tf) - I(V X ; V 2 \U) 

.7=1,2 

-7(V 2 ;Z|E/) (475) 

R sX + 7? s2 + 77 p2 < min I(U; Yj) + I(V X ; Y X \U) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) 
i=i,2 

-I(V X ;Z\U,V 2 ) (476) 
R sX + ^ + i? s2 + R p2 < min 7(*7; Yj) + I(V X ; Y X \U) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) (477) 

.7=1,2 

We denote the region given by (I470p - (14771) by 1Z 2X . Similarly the following achievable rate 
region can be obtained as well. 

R sl < min I{U; Yj\Q) + I{V X ; Y X \U) - I(U, V x ; Z\Q) (478) 

.7=1,2 

R s2 < min 7(*7; Yj\Q) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) - I(U; Z\Q) 

.7=1,2 

-I(V 2 ;Z\U,V X ) (479) 

+ Rs2 < min 7(*7; + I(V X ; Y X \U) + 7(V 2 ; Y 2 \U) - J(K; V^ 2 |t7) 

.7=1,2 

-I(U,V X ,V 2 ;Z\Q) (480) 

7? sl + 77 pl < min I(U; Yj) + I(V X ; Y X \U) (481) 

,7=1,2 

i? s2 + R p2 < min 7(l/; Yj) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) (482) 

j — 1)2 

77 sl + 7? pl + 77 s2 < min 7(C7; ^) + I(V x] Y X \U) + 7(F 2 ; r 2 |?7) - 7(V i; V 2 |77) 

.7=1,2 

-I(V 2 ;Z\U,V X ) (483) 
77 sl + 7? s2 + R p2 < min /(Z7; Yj) + 7(Vi; n|Z7) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) 

3=1,2 

-I(V X ;Z\U) (484) 
R sX + R pl + R s2 + R p2 < min 7(*7; Yj) + I(V X ; Y X \U) + I(V 2 ; Y 2 \U) - I(V X ; V 2 \U) (485) 
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which is denoted by 1Z\ 2 . Hence, we obtain the achievable rate region 1Z which is given by 



n = conv (TZ 12 U K 21 ) (486) 

Next, we outline an alternative method to obtain the region TZ 2 \. First, we set L l5 L 2 , i? pl , 
R P 2, Ai, A 2 as follows. 

L 1 = I(V 1 ;V 2 \U) (487) 
L 2 = (488) 
R pl + A 1 = I(V 1 ;Z\U,V 2 ) (489) 
# p2 + A 2 = /(V 2 ;Z|£7) (490) 

Using the values of L u L 2 , R pl + A u R p2 + A 2 given by (14871) - (1490]) in (fT9"I]) - (fl9"9"L we have 
the following achievable rate region. 

R P o + Rso + A < min I(U; Yj) (491) 
i=i,2 

# P o + ^so + A < min /([/; y^Q) (492) 
2=1,2 

Rsi < I(Vi, Y X \U)- I{V X - V 2 \U) - /(K; Z|Z7, K 2 ) (493) 

i? s2 < /(V 2 ; F 2 |C/) - I(V 2 ; Z\U) (494) 

^o + A = /(E/;ZiQ) (495) 

R pl + A 1 = I(V 1 ;Z\U,V 2 ) (496) 

i?p 2 + A 2 = /(y 2 ;Z|C/) (497) 

Next, following the procedure in Appendix IB. 21 the achievable rate region given by (14701) - 
(14771) . i.e., 72^1, can be obtained by using the achievable rate region given by (149 II) -( 14971) . 
Similarly, the other region TZ 12 can be obtained as well. We also note that this alternative 
derivation reveals that since we select L x = I(Vi, V 2 \U), L 2 — to obtain the achievable rate 
region 1Z 2 i, in this case, the transmitter first encodes V 2 n , and then, next using the non-causal 
knowledge of V 2 , encodes V™, i.e., uses Gelfand-Pinsker encoding for V 2 . 

Next, we obtain an achievable rate region for the Gaussian MIMO multi- receiver wiretap 
channel with public and confidential messages. We provide this achievable rate region by 
evaluating the regions 1Z\ 2 and TZ 2 \ with a specific choice of Q, U, Vi,V 2 , X. In particular, to 
evaluate TZ 2 i, we use the following selection for Q, U, V\, V 2 , X: 

• Q is selected as a zero- mean Gaussian random vector with covariance matrix S — K — 
Ki— K 2 , where K , Ki, K 2 are positive semi-definite matrices satisfying K +Ki+K 2 < 
S, 

• U is selected as U — Q + Q', where Q' is a zero-mean Gaussian random vector with 
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covariance matrix Ko, and is independent of Q, 

• Vi is selected as V2 = U + 11%, where U2 is a zero-mean Gaussian random vector with 
covariance matrix K 2 , and is independent of Q, Q', 

• V\ is selected as V\ = U\ + AU 2 + U, where U\ is a zero-mean Gaussian random vector 
with covariance matrix Ki, and is independent of Q, Q' , 1/2- The encoding matrix A 
is given by A = Ki [K x + 

• X is selected as X = Q + Q' + U 2 + U x . 

We note that we use dirty-paper coding [19] to encode Vi, which leads to the following. 

IiV^Y^U) - I(Vi;V 2 \U) = ^log |K j+^ 11 (498) 
The other mutual information terms in the region TZ 2 i can be computed straightforwardly, 
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which leads to the following region. 



. 1 iKo + Ki + Ka + iy 1 l^ + S^ 
/t s i < mm - log — — H — log 



i=i,2 2 ° |Ki + K 2 + Sj| 2 ° 

1 IKo + Kx + ^ + SzI 1 |Kx + S z | 

~2 l0g |K 1 + K 2 + £ Z | 2 l0g ^T ^ 

. 1 iKo + Ki + Ka + E,.] 1 |K X + K 2 + S 2 | 

it s2 < mm - log : — , H — log ; — — 

3=i,2 2 & IKx + K. + S.-I 2 S |K! + S 2 | 

1 |K + K 1 + K 2 + S Z | 

"2 log ikTTs^I (500) 

R s i + R s2 < mm - log — — — + - log 



3- 



=1,22 ° |Ki + K 2 + £j| 2 ° |Ki + S 2 | 
1. IKx + SxI 1 IKo + Kx + K. + SzI 
2 g — lEd 2 g [Sj ^ ^ 

ftl + Jfc < njia \ .eg + \ k* l*j±pt (5 02) 

*- + ^ * jSiS \ |Ki + K^' E,| +5 + S^' ' M3 > 

+ iLi + i? S 9 < min - log i ^— - — — r H — log - — 7 , ^ 

,i-r pi-r s2_ i=ii22 & iKi + Ka + Sjl 2 & |Si| 

1. |K! + K 2 + E 2 | 1 IKx + K. + SzI 

H log- 1 ; ; 1 log- 1 ; ; (504) 

„ 1, |S + S,-| 1 |Ki + K 2 + E 2 | 

+ R*2 + -Rr>2 < mm - log H — log — ; ; — 

si-r 82^ p2 - j=h22 & iKi + Ka + Ejl 2 S |Ki + E 2 | 

1 IKx + SxI 1 |K 1 + S Z | 

2 g — 2 g — [Sj — ^ ^ 

ifc + R P r + Rs, + R P , < mm 1 log ,^^3,, + 5 log 

+ ^ log nsrr (506) 

We denote the region given in (149 9 [) - (1 5 6 1) by 72 2 i(Ko, Ki, K 2 ). Similarly, we can evalu- 
ate the region 72i 2 to obtain another achievable rate region 72i 2 (K , Ki, K 2 ) for the Gaus- 
sian MIMO multi-receiver wiretap channel, where 72i 2 (K , K 1; K 2 ) can be obtained from 
72-21 (Kq, Ki, K 2 ) by swapping the subscripts 1 and 2. 
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